<div class="container">
<h1>Security update for psqlODBC</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:5192-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-11-11T12:28:36Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1285073">bsc#1285073</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289252">bsc#1289252</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289253">bsc#1289253</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289254">bsc#1289254</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289255">bsc#1289255</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289256">bsc#1289256</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289257">bsc#1289257</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289258">bsc#1289258</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289259">bsc#1289259</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289260">bsc#1289260</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289261">bsc#1289261</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289262">bsc#1289262</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-109448.html">CVE-2026-109448</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120057.html">CVE-2026-120057</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120058.html">CVE-2026-120058</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120059.html">CVE-2026-120059</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120060.html">CVE-2026-120060</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120061.html">CVE-2026-120061</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120062.html">CVE-2026-120062</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120063.html">CVE-2026-120063</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120064.html">CVE-2026-120064</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120065.html">CVE-2026-120065</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120066.html">CVE-2026-120066</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-120067.html">CVE-2026-120067</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-109448</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-109448</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120057</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120057</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120058</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120058</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120059</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120059</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.8</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120060</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120060</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120061</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120061</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120062</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120062</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120063</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120063</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120064</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120064</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120065</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120065</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120066</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120066</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120067</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-120067</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 12 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 12 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 12 SP5 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 12 SP5</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves 12 vulnerabilities can now be installed.</p>
<h2>Description:</h2>
<p>This update for psqlODBC fixes the following issues:</p>
<ul>
<li>CVE-2026-109448: denial of service via integer wraparound in SQLBindParameter (bsc#1285073).</li>
<li>CVE-2026-120057: large-object read overflows the application buffer (bsc#1289252).</li>
<li>CVE-2026-120058: row cache overflow when a later FETCH changes the column count (bsc#1289253).</li>
<li>CVE-2026-120059: driver uses a server-supplied column name as a format string (bsc#1289254).</li>
<li>CVE-2026-120060: driver does not validate server-supplied counts and lengths (bsc#1289255).</li>
<li>CVE-2026-120061: ODBC escape parser stack buffer overflow (bsc#1289256).</li>
<li>CVE-2026-120062: SQL injection through SQLSpecialColumns table and schema names (bsc#1289257).</li>
<li>CVE-2026-120063: stack buffer overflow when quoting long schema and table names (bsc#1289258).</li>
<li>CVE-2026-120064: driver does not validate column numbers and row indexes in binding and descriptor functions
(bsc#1289259).</li>
<li>CVE-2026-120065: driver does not escape a server-supplied column name in its updatable-cursor queries (bsc#1289260).</li>
<li>CVE-2026-120066: log files are created with default permissions at a predictable path and follow symbolic links
(bsc#1289261).</li>
<li>CVE-2026-120067: stack buffer overflow when reading the keyset (ctid/oid) columns of an updatable cursor
(bsc#1289262).</li>
</ul>
<p>Changes for psqlODBC:</p>
<ul>
<li>Update to 18.00.0006:</li>
<li>https://odbc.postgresql.org/docs/release.html</li>
<li>Hardening: SQLSetDescRecW stored a freed buffer and the address
of a local variable as deferred bound data. It now stores the
application's pointers, as SQLSetDescRec does.</li>
<li>Hardening: SQLColumns returned uninitialized relkind and table
OID values when the table query returned no rows.</li>
<li>Hardening: convert_linefeeds could dereference a NULL pointer
in one build configuration.</li>
<li>Hardening: secure_sscanf limits an over-wide %Ns width,
msgtowstr checks for a zero buffer length, and the MSDTC
connect-string append is bounded.</li>
<li>Update to 18.00.0005:</li>
<li>https://odbc.postgresql.org/docs/release.html</li>
<li>Fix the placeholder cast being truncated from parameter 1000
on, which failed with 'type "timestam" does not exist'.</li>
<li>Report the largest column size instead of SQL_NO_TOTAL (-4) as
COLUMN_SIZE for bytea in SQLGetTypeInfo, which broke bytea
parameters through MSDASQL.</li>
<li>Update to 18.00.0004:</li>
<li>Fix the result-conversions regression test on big-endian
systems.</li>
<li>Update to 18.00.0003:</li>
<li>Report SQLSTATE 22003 for out-of-range integer conversions
instead of silently returning the wrapped low bits.</li>
<li>Fix statement level rollback (Protocol=7.4-2) discarding the
whole transaction on a syntax error.</li>
<li>Do not wrap internal queries in a savepoint at
rollback-on-error level 0 (Protocol=7.4-0), which lost
transactions on servers without SAVEPOINT support.</li>
<li>Redact the database password (ODBC PWD and libpq pqopt
password) in debug logs.</li>
<li>Fix hang on COPY ... FROM STDIN / TO STDOUT: report it as
unsupported and keep the connection usable.</li>
<li>Fix 'infinity'/'-infinity' dates being silently returned as
today's date.</li>
<li>Document the connection string escaping rules.</li>
<li>Update to 18.00.0002:</li>
<li>Use a signed type for the error status.</li>
<li>Redact sensitive connection parameters in the driver logs.</li>
<li>Fix double free / heap corruption during SQLDisconnect
cleanup.</li>
<li>Clear PGresults from per-query rollback.</li>
<li>Validate UTF-16 surrogate pairs before combining them.</li>
<li>Pass SQLSetDescRec field values correctly.</li>
<li>Avoid reading before leading string literals.</li>
<li>Detach freed application descriptors from statements.</li>
<li>Reject invalid SQLPutData lengths.</li>
<li>Reject overlong cursor names.</li>
<li>Fix version reporting.</li>
<li>Handle ARD bookmark allocation failure.</li>
<li>Validate percent escapes before decoding connection string
values.</li>
<li>Avoid reading past the end of conn_settings.</li>
<li>Fix stack buffer overflow in getPrecisionPart().</li>
<li>Fix SQLPrimaryKeys to exclude INCLUDE columns from the result.</li>
<li>Update to 18.00.0000, 18.00.0001 and 17.00.0010:</li>
<li>No code changes from 17.00.0009.</li>
<li>Update to 17.00.0009:</li>
<li>Fix the test suite for PostgreSQL 19, where
standard_conforming_strings is always on.</li>
<li>Upgrade the GitHub Actions workflow: use prebuilt PostgreSQL
binaries, parallel matrix builds and a separate release job.</li>
<li>Update to 17.00.0008:</li>
<li>https://odbc.postgresql.org/docs/release.html</li>
<li>fix build for SLE-15 by forcing gcc 14</li>
<li>Update to 16.00.0000:</li>
<li>Use autoconf to check for stdbool.h.</li>
<li>Update to 13.02.0000:</li>
<li>Fix a bug of CC_send_query_append() when the
ignore_roundtrip_time flag is onRemove a mylog() call which is
a dupilicate of the preceding MYLOG() macro call.</li>
<li>Remove REFCUR_SUPPORT, add FetchRefcursors setting.</li>
<li>Support fetching results from multiple refcursors.</li>
<li>Named parameter binding support</li>
<li>Use ODBC 3 column names for the result set of catalog
functions.</li>
<li>Update to 13.01.0000:</li>
<li>Fix a bug of CC_send_query_append() when the
ignore_roundtrip_time flag is on.</li>
<li>Add a call for SQLDescribeCol() before SQLExecute() to prepare-test.</li>
<li>The diff of the result was reported by Mangold Fabian and will be
fixed in the later commit.</li>
<li>Add a <em>update returning</em> test case to insertreturning regression test.</li>
<li>The diff of the result was reported by Patrick Cheung and will be
fixed in the later commit.</li>
<li>Let SQLDescribeCol() use parsed result when the current executed
result is NULL.</li>
<li>This change fixes the diff of prepare-test regression test reported
by Mangold Fabian.</li>
<li>Let SQLExecute() destroy the old result first.</li>
<li>This change fixes the diff of insertreturning-test regression test
reported by Patrick Cheung.</li>
<li>Forget to apply disable_convert_func flag to VARCHAR and LONGVARCHAR.</li>
<li>Prioritize DISABLE_KEEPALIVE checkbox over the disable_keepalive
bit of ExtraOptions.</li>
<li>Format check for ExtraOptions of setup dialog.</li>
<li>Update to 13.00.0000:</li>
<li>Add support for CONVERT scalar function.</li>
<li>Cope with the case that openssl libraries link msvc runtimes
other than libraries which psqlodbc or libpq links.</li>
<li>Call AC_CHECK_SIZEOF() or AC_CHECK_TYPES() macros at earlier
stage where LIBS variable isn't set yet.</li>
<li>These macros compile and run some programs. On some platforms
(with some linker options like --no-as-needed in Lnux Gnu linker)
the programs try to link libraries specified by LIBS variable
at run time. There are some cases that the programs fail due
to missing library which is actually not needed and
AC_CHECK_SIZEOF() returns 0.</li>
<li>Fix a compilation error with GCC 10 due to conflicting
variable names.</li>
<li>Patch by Paul Wise.</li>
<li>Remove curr_param_result property of StatementClass and
separate parsed result from the exec result.</li>
<li>Add support for development with VC16(Visual Studio 2019).</li>
<li>MSToolsVersion parameter of BuildAll.ps1 and of regress.ps1
are deprecated.</li>
<li>Hold the first and last result for parametrized SQL statements
with array of parameters.</li>
<li>This would improve the performance of bulk inserts/updates etc.</li>
<li>Revise the handling of QResultClass list.</li>
<li>Introduce macros QR_concat(), QR_detach() and QR_next().</li>
<li>Correct the handling of SQL_ROW_ERROR and SQL_ROW_SUCCESS_WITH_INFO.</li>
<li>Remove the single table restriction in SC_set_SS_columnkey.</li>
<li>Improve error reporting about SC_pos_reload_needed().</li>
<li>Update to 12.02.0000:</li>
<li>Add a new <em>Display Optional Error Message</em> option.
This option allows to display error messages other than primary
one. Also add documentaition about the option and
<em>Numeric as</em> option.</li>
<li>Handle notice messages in libpq_bind_and_exec().
Sets and resets a notify receiver around PQexecParams() or
PQexecPrepared().</li>
<li>Ignore PQtransactionStatus PQTRANS_ACTIVE in
LIBPQ_update_transaction_status(). PQTRANS_ACTIVE isn't a
transaction status.</li>
<li>Improve execution of parameterized SQL statements with arrays
of parameters by sending chunks of SQL statements.
If SQL_ATTR_CURSOR_TYPE of an statement is
SQL_CURSOR_FORWARD_ONLY, SQL_ATTR_CONCURRENCY is
SQL_CONCUR_READ_ONLY and extended protocol isn't used, the
batch execution of the statement is possible. A new option
Batch Size was introduced for such cases.
Batch Size: Split an array (of parameters) into chunks of
Batch Size to execute statements. The last chunk may contain
less than Batch Size elements. Setting 1 to this option forces
the current one by one execution.
Also turn off use_server_side_prepare option temporarily when
batch executuion is possible.</li>
<li>Change SC_execute() so that it returns a return code which is
not affetced by the preceding results. It's necessary for
batch execution with arrays of parameters.</li>
<li>Add a new option IgnoreTimeout.</li>
<li>Some tools issue issue SQLSetStmtAttr(.., SQL_ATTR_QUERY_TIMEOUT,,)
internally and sometimes it's difficult for users to change the
timeout value. You can disable the timeout by turning on this option.</li>
<li>An improvement for psqlodbc developpers.
Make it possible to call some shell scripts from other directories.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server 12 SP5 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-5192</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
<br/>
<code>zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-5192</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>psqlODBC-debugsource-18.00.0006-1.8.1</li>
<li>psqlODBC-debuginfo-18.00.0006-1.8.1</li>
<li>psqlODBC-18.00.0006-1.8.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64)
<ul>
<li>psqlODBC-debugsource-18.00.0006-1.8.1</li>
<li>psqlODBC-debuginfo-18.00.0006-1.8.1</li>
<li>psqlODBC-18.00.0006-1.8.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-109448.html">https://www.suse.com/security/cve/CVE-2026-109448.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120057.html">https://www.suse.com/security/cve/CVE-2026-120057.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120058.html">https://www.suse.com/security/cve/CVE-2026-120058.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120059.html">https://www.suse.com/security/cve/CVE-2026-120059.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120060.html">https://www.suse.com/security/cve/CVE-2026-120060.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120061.html">https://www.suse.com/security/cve/CVE-2026-120061.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120062.html">https://www.suse.com/security/cve/CVE-2026-120062.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120063.html">https://www.suse.com/security/cve/CVE-2026-120063.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120064.html">https://www.suse.com/security/cve/CVE-2026-120064.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120065.html">https://www.suse.com/security/cve/CVE-2026-120065.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120066.html">https://www.suse.com/security/cve/CVE-2026-120066.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-120067.html">https://www.suse.com/security/cve/CVE-2026-120067.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1285073">https://bugzilla.suse.com/show_bug.cgi?id=1285073</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289252">https://bugzilla.suse.com/show_bug.cgi?id=1289252</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289253">https://bugzilla.suse.com/show_bug.cgi?id=1289253</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289254">https://bugzilla.suse.com/show_bug.cgi?id=1289254</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289255">https://bugzilla.suse.com/show_bug.cgi?id=1289255</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289256">https://bugzilla.suse.com/show_bug.cgi?id=1289256</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289257">https://bugzilla.suse.com/show_bug.cgi?id=1289257</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289258">https://bugzilla.suse.com/show_bug.cgi?id=1289258</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289259">https://bugzilla.suse.com/show_bug.cgi?id=1289259</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289260">https://bugzilla.suse.com/show_bug.cgi?id=1289260</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289261">https://bugzilla.suse.com/show_bug.cgi?id=1289261</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1289262">https://bugzilla.suse.com/show_bug.cgi?id=1289262</a>
</li>
</ul>
</div>