openSUSE-SU-2026:0284-1: important: Security update for chromium
SUSE-SU-2026:3611-1: important: Security update for dracut
SUSE-SU-2026:3612-1: important: Security update for dracut
SUSE-SU-2026:3617-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:21573-1: important: Security update for himmelblau
openSUSE-SU-2026:11506-1: moderate: kernel-devel-7.1.8-1.1 on GA media
openSUSE-SU-2026:11509-1: moderate: python3-ansible-compat-26.8.0-1.1 on GA media
openSUSE-SU-2026:11502-1: moderate: 7zip-26.02-2.1 on GA media
openSUSE-SU-2026:11510-1: moderate: python313-nltk-3.10.2-1.1 on GA media
openSUSE-SU-2026:11503-1: moderate: ansible-lint-26.8.0-1.1 on GA media
openSUSE-SU-2026:11508-1: moderate: pgadmin4-9.17-1.1 on GA media
openSUSE-SU-2026:11507-1: moderate: molecule-26.8.0-1.1 on GA media
openSUSE-SU-2026:11504-1: moderate: dracut-112+suse.29.gc0c5e1d-1.1 on GA media
openSUSE-SU-2026:0284-1: important: Security update for chromium
openSUSE Security Update: Security update for chromium
_______________________________
Announcement ID: openSUSE-SU-2026:0284-1
Rating: important
References: #1274759
Cross-References: CVE-2026-19556 CVE-2026-19557 CVE-2026-19558
CVE-2026-19559 CVE-2026-19560
Affected Products:
openSUSE Backports SLE-15-SP7
_______________________________
An update that fixes 5 vulnerabilities is now available.
Description:
This update for chromium fixes the following issues:
- Chromium 151.0.7922.137 (boo#1274759):
* CVE-2026-19556: Use after free in V8
* CVE-2026-19557: Use after free in TabStrip
* CVE-2026-19558: Use after free in Extensions
* CVE-2026-19559: Use after free in HTML
* CVE-2026-19560: Use after free in Blink
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP7:
zypper in -t patch openSUSE-2026-284=1
Package List:
- openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):
chromedriver-151.0.7922.137-bp157.2.205.1
chromium-151.0.7922.137-bp157.2.205.1
References:
https://www.suse.com/security/cve/CVE-2026-19556.html
https://www.suse.com/security/cve/CVE-2026-19557.html
https://www.suse.com/security/cve/CVE-2026-19558.html
https://www.suse.com/security/cve/CVE-2026-19559.html
https://www.suse.com/security/cve/CVE-2026-19560.html
https://bugzilla.suse.com/1274759
SUSE-SU-2026:3611-1: important: Security update for dracut
# Security update for dracut
Announcement ID: SUSE-SU-2026:3611-1
Release Date: 2026-08-13T17:58:46Z
Rating: important
References:
* bsc#1274432
Cross-References:
* CVE-2026-15816
CVSS scores:
* CVE-2026-15816 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-15816 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.5
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Micro 5.5
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
An update that solves one vulnerability can now be installed.
## Description:
This update for dracut fixes the following issue:
Update to version 055+suse.404.gc96044c.
Securitys issue fixed:
* CVE-2026-15816: root code execution via unescaped error message written to
sourced emergency-hook script in `die()` (bsc#1274432).
Other updates and bugfixes:
* Fix(base): sanitize message written by `die()` to the emergency hook.
* Feat(base): add escape function implementing `printf %q`.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3611=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-3611=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3611=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3611=1
* openSUSE Leap 15.5
zypper in -t patch SUSE-2026-3611=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3611=1
## Package List:
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-ima-055+suse.404.gc96044c-150500.3.44.1
* dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-055+suse.404.gc96044c-150500.3.44.1
* SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
* dracut-055+suse.404.gc96044c-150500.3.44.1
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64)
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-ima-055+suse.404.gc96044c-150500.3.44.1
* dracut-tools-055+suse.404.gc96044c-150500.3.44.1
* dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* dracut-extra-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-055+suse.404.gc96044c-150500.3.44.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-ima-055+suse.404.gc96044c-150500.3.44.1
* dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-055+suse.404.gc96044c-150500.3.44.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-ima-055+suse.404.gc96044c-150500.3.44.1
* dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-055+suse.404.gc96044c-150500.3.44.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* dracut-fips-055+suse.404.gc96044c-150500.3.44.1
* dracut-ima-055+suse.404.gc96044c-150500.3.44.1
* dracut-mkinitrd-deprecated-055+suse.404.gc96044c-150500.3.44.1
* dracut-debuginfo-055+suse.404.gc96044c-150500.3.44.1
* dracut-debugsource-055+suse.404.gc96044c-150500.3.44.1
* dracut-055+suse.404.gc96044c-150500.3.44.1
## References:
* https://www.suse.com/security/cve/CVE-2026-15816.html
* https://bugzilla.suse.com/show_bug.cgi?id74432
SUSE-SU-2026:3612-1: important: Security update for dracut
# Security update for dracut
Announcement ID: SUSE-SU-2026:3612-1
Release Date: 2026-08-13T17:59:06Z
Rating: important
References:
* bsc#1274432
Cross-References:
* CVE-2026-15816
CVSS scores:
* CVE-2026-15816 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-15816 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.6
* SUSE Linux Enterprise High Availability Extension 15 SP6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
An update that solves one vulnerability can now be installed.
## Description:
This update for dracut fixes the following issue:
Update to version 059+suse.567.gf5cfeb7f7.
Securitys issue fixed:
* CVE-2026-15816: root code execution via unescaped error message written to
sourced emergency-hook script in `die()` (bsc#1274432).
Other updates and bugfixes:
* Fix(base): sanitize message written by `die()` to the emergency hook.
* Feat(base): add escape function implementing `printf %q`.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3612=1
* SUSE Linux Enterprise High Availability Extension 15 SP6
zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-3612=1
* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3612=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3612=1
## Package List:
* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* dracut-extra-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-debuginfo-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-fips-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-debugsource-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-ima-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-tools-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-mkinitrd-deprecated-059+suse.567.gf5cfeb7f7-150600.3.32.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* dracut-debuginfo-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-fips-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-ima-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-debugsource-059+suse.567.gf5cfeb7f7-150600.3.32.1
* SUSE Linux Enterprise High Availability Extension 15 SP6 (ppc64le x86_64)
* dracut-debugsource-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-mkinitrd-deprecated-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-debuginfo-059+suse.567.gf5cfeb7f7-150600.3.32.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* dracut-debuginfo-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-fips-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-ima-059+suse.567.gf5cfeb7f7-150600.3.32.1
* dracut-debugsource-059+suse.567.gf5cfeb7f7-150600.3.32.1
## References:
* https://www.suse.com/security/cve/CVE-2026-15816.html
* https://bugzilla.suse.com/show_bug.cgi?id74432
SUSE-SU-2026:3617-1: important: Security update for the Linux Kernel
# Security update for the Linux Kernel
Announcement ID: SUSE-SU-2026:3617-1
Release Date: 2026-08-13T18:04:38Z
Rating: important
References:
* bsc#1185845
* bsc#1226591
* bsc#1237888
* bsc#1239015
* bsc#1240552
* bsc#1240727
* bsc#1243603
* bsc#1244229
* bsc#1245457
* bsc#1245728
* bsc#1245729
* bsc#1245730
* bsc#1245731
* bsc#1246203
* bsc#1246212
* bsc#1251135
* bsc#1251971
* bsc#1252266
* bsc#1253049
* bsc#1254767
* bsc#1255616
* bsc#1256690
* bsc#1257466
* bsc#1257472
* bsc#1257541
* bsc#1258718
* bsc#1259580
* bsc#1260347
* bsc#1261648
* bsc#1262573
* bsc#1263010
* bsc#1263718
* bsc#1263788
* bsc#1264013
* bsc#1264053
* bsc#1264076
* bsc#1264089
* bsc#1264387
* bsc#1264558
* bsc#1264779
* bsc#1265308
* bsc#1265928
* bsc#1266238
* bsc#1266402
* bsc#1266414
* bsc#1266758
* bsc#1266765
* bsc#1266850
* bsc#1266913
* bsc#1267375
* bsc#1267384
* bsc#1267435
* bsc#1267494
* bsc#1267584
* bsc#1267596
* bsc#1267656
* bsc#1267715
* bsc#1268029
* bsc#1268237
* bsc#1268750
* bsc#1268989
* bsc#1269172
* bsc#1269174
* bsc#1269181
* bsc#1269188
* bsc#1269289
* bsc#1269512
* bsc#1269513
* bsc#1269577
* bsc#1269731
* bsc#1269773
* bsc#1269798
* bsc#1269986
* bsc#1269988
* bsc#1269993
* bsc#1269997
* bsc#1270257
* bsc#1271011
* bsc#1271526
* bsc#1271825
* bsc#1271866
* bsc#1271899
* bsc#1271904
* bsc#1271908
* bsc#1271912
* bsc#1271964
* bsc#1272176
* bsc#1272180
* bsc#1272207
* bsc#1272242
* bsc#1272263
* bsc#1272268
* bsc#1272573
* bsc#1272607
* bsc#1272665
* bsc#1272678
* bsc#1272693
* bsc#1272694
* bsc#1272855
* bsc#1272865
* bsc#1272904
* bsc#1272907
* bsc#1272918
* bsc#1273004
* bsc#1273035
* bsc#1273097
* bsc#1273231
* bsc#1274072
* jsc#PED-12576
* jsc#PED-16573
Cross-References:
* CVE-2022-4994
* CVE-2023-2058
* CVE-2023-53995
* CVE-2024-38542
* CVE-2025-21710
* CVE-2025-21953
* CVE-2025-54518
* CVE-2026-31431
* CVE-2026-31542
* CVE-2026-31598
* CVE-2026-31628
* CVE-2026-31759
* CVE-2026-43033
* CVE-2026-43056
* CVE-2026-43211
* CVE-2026-43276
* CVE-2026-43440
* CVE-2026-46052
* CVE-2026-46056
* CVE-2026-46080
* CVE-2026-46084
* CVE-2026-46109
* CVE-2026-46117
* CVE-2026-46126
* CVE-2026-46144
* CVE-2026-46145
* CVE-2026-46174
* CVE-2026-46193
* CVE-2026-46243
* CVE-2026-46323
* CVE-2026-46333
* CVE-2026-52933
* CVE-2026-52956
* CVE-2026-52958
* CVE-2026-52967
* CVE-2026-52986
* CVE-2026-53050
* CVE-2026-53131
* CVE-2026-53196
* CVE-2026-53224
* CVE-2026-53246
* CVE-2026-53256
* CVE-2026-53260
* CVE-2026-53267
* CVE-2026-53297
* CVE-2026-53324
* CVE-2026-53357
* CVE-2026-53375
* CVE-2026-53388
* CVE-2026-53391
* CVE-2026-53402
* CVE-2026-63794
* CVE-2026-63806
* CVE-2026-63807
* CVE-2026-63824
* CVE-2026-63829
* CVE-2026-63884
* CVE-2026-63893
* CVE-2026-63917
* CVE-2026-63919
* CVE-2026-63921
* CVE-2026-63922
* CVE-2026-63924
* CVE-2026-63946
* CVE-2026-63971
* CVE-2026-63975
* CVE-2026-63984
* CVE-2026-63994
* CVE-2026-64106
* CVE-2026-64189
* CVE-2026-64530
* CVE-2026-64560
* CVE-2026-64561
* CVE-2026-64564
* CVE-2026-64600
CVSS scores:
* CVE-2023-2058 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
* CVE-2023-2058 ( NVD ): 2.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
* CVE-2023-53995 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2023-53995 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-38542 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
* CVE-2024-38542 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2024-38542 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-21710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-21710 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-21710 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2025-21953 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-21953 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-21953 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-21953 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-54518 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-54518 ( NVD ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2025-54518 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31542 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31542 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31542 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31598 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31598 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31628 ( SUSE ): 5.7
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-31628 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-31628 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31759 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31759 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-31759 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43033 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43033 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43033 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43056 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43056 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43211 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43211 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43276 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43276 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46052 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46056 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46056 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46080 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46084 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46084 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46109 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46117 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46117 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46117 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46117 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46126 ( SUSE ): 4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46126 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46144 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46144 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46145 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46145 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46145 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46145 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46174 ( SUSE ): 5.9
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46174 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H
* CVE-2026-46174 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-46193 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46193 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46243 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46243 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46243 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-46243 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46243 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46323 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46333 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46333 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46333 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-46333 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-52933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52933 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-52956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52958 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52958 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-52967 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-52967 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
* CVE-2026-52986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52986 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53050 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53050 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53050 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53131 ( SUSE ): 8.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
* CVE-2026-53196 ( SUSE ): 7.0
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53196 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53196 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53196 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53224 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53224 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53224 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-53246 ( SUSE ): 8.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53246 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
* CVE-2026-53246 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53256 ( SUSE ): 7.7
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53256 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53256 ( NVD ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53260 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53267 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53267 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53267 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53297 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53324 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53357 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53357 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53357 ( NVD ): 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53375 ( SUSE ): 7.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53375 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
* CVE-2026-53375 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-53388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53391 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53391 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53402 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53402 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-53402 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-63794 ( SUSE ): 7.5
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63806 ( SUSE ): 5.9
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63806 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
* CVE-2026-63806 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
* CVE-2026-63807 ( SUSE ): 5.8
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63807 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H
* CVE-2026-63807 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-63824 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63824 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63824 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63829 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63829 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-63829 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-63884 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63884 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63884 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63893 ( SUSE ): 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
* CVE-2026-63893 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-63917 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-63919 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63919 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63919 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63921 ( SUSE ): 9.3
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
* CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
* CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-63922 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63924 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63924 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63946 ( SUSE ): 7.7
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63946 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63946 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63971 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63975 ( SUSE ): 8.7
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63975 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63975 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63984 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63984 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63994 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64106 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64106 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-64106 ( NVD ): 9.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
* CVE-2026-64189 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64530 ( SUSE ): 8.8
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-64530 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64560 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64560 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64561 ( SUSE ): 9.3
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-64564 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-64600 ( SUSE ): 8.8
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-64600 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-64600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.5
* SUSE Linux Enterprise Micro 5.5
An update that solves 75 vulnerabilities, contains two features and has 33
security fixes can now be installed.
## Description:
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security
issues:
The following security issues were fixed:
* CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
* CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa()
(bsc#1255616).
* CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks
(bsc#1226591).
* CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove()
(bsc#1240727).
* CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed
(bsc#1267494).
* CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey
handlers (bsc#1267435).
* CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
* CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks
(bsc#1267656).
* CVE-2026-52933: io_uring/poll: fix signed comparison in
io_poll_get_ownership() (bsc#1268989).
* CVE-2026-52956: libceph: Fix potential out-of-bounds access in
__ceph_x_decrypt() (bsc#1269172).
* CVE-2026-52958: libceph: Fix potential out-of-bounds access in
osdmap_decode() (bsc#1269174).
* CVE-2026-52967: smb/client: fix possible infinite loop and oob read in
symlink_data() (bsc#1269181).
* CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul
(bsc#1269289).
* CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota
deactivation (bsc#1269188).
* CVE-2026-53131: netfilter: require Ethernet MAC header before using
eth_hdr() (bsc#1269773).
* CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info()
(bsc#1269986).
* CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths
in cookie (bsc#1269997).
* CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO
processing (bsc#1269988).
* CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in
rfcomm_connect_ind() (bsc#1269993).
* CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested()
(bsc#1269731).
* CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval
(bsc#1269577).
* CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs
l2cap_conn_del() (bsc#1270257).
* CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches
(bsc#1271899).
* CVE-2026-53388: fuse: re-lock request before replacing page cache folio
(bsc#1271825).
* CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in
nfs4_decode_mp_ds_addr (bsc#1271904).
* CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of
(bsc#1271908).
* CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT
path (bsc#1271964).
* CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd
datamatch with get_unaligned() (bsc#1272268).
* CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking
max mapping level (bsc#1272263).
* CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2()
(bsc#1272180).
* CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1272176).
* CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge
(bsc#1272573).
* CVE-2026-63893: thunderbolt: property: Reject u32 wrap in
tb_property_entry_valid() (bsc#1272607).
* CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink()
(bsc#1272904).
* CVE-2026-63919: xfrm: input: hold netns during deferred transport
reinjection (bsc#1272907).
* CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
(bsc#1272918).
* CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO
option (bsc#1272855).
* CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
* CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff
(bsc#1272678).
* CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
(bsc#1272694).
* CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
(bsc#1272865).
* CVE-2026-63994: tunnels: load network headers after skb_cow() in
iptunnel_pmtud_build_icmp() (bsc#1273035).
* CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range
num_eventid_bits (bsc#1272242).
* CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list
resize (bsc#1272207).
* CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec()
race (bsc#1273004).
* CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU
pages available (bsc#1273231).
* CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP
processing (bsc#1274072).
* CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK
(bsc#1271526).
The following non security issues were fixed:
* block: fix use-after-free of q->q_usage_counter (bsc#1268750).
* cpumask: add cpumask_weight_andnot() (bsc#1239015).
* Drivers: hv: fix missing kernel-doc description for 'size' in
request_arr_init() (git-fixes).
* Drivers: hv: remove stale comment (git-fixes).
* Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store()
(git-fixes).
* Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-
fixes).
* Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
* Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (git-
fixes).
* Drivers: hv: vmbus: Remove duplication and cleanup code in
create_gpadl_header() (git-fixes).
* Drivers: hv: vmbus: Update indentation in create_gpadl_header() (git-fixes).
* drm/hyperv: validate resolution_count and fix WIN8 fallback (git-fixes).
* drm/hyperv: validate VMBus packet size in receive callback (git-fixes).
* ethtool: Implement ethtool_puts() (git-fixes).
* hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (bsc#1271912).
* hv: utils: handle and propagate errors in kvp_register (git-fixes).
* hv_balloon: Simplify data output in hv_balloon_debug_show() (git-fixes).
* hv_netvsc: Use VF's tso_max_size value when data path is VF (bsc#1246203).
* hv_sock: fix ARM64 support (git-fixes).
* hv_utils: Allow implicit ICTIMESYNCFLAG_SYNC (git-fixes).
* hyperv: Clean up and fix the guest ID comment in hvgdk.h (git-fixes).
* IPv6/GRO: generic helper to remove temporary HBH/jumbo header in
(bsc#1246203).
* ipv6/gso: remove temporary HBH/jumbo header (bsc#1246203).
* ipv6: add struct hop_jumbo_hdr definition (bsc#1246203).
* jiffies: Cast to unsigned long in secs_to_jiffies() conversion
(bsc#1257466).
* jiffies: Define secs_to_jiffies() (bsc#1257466).
* lib/bitmap: add bitmap_weight_and() (bsc#1239015).
* mkspec-dtb: Skip missing DTBs.
* net/mana: fix warning in the writer of client oob (git-fixes).
* net/mana: Null service_wq on setup error to prevent double destroy (git-
fixes).
* net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
(bsc#1271866).
* net: mana: add a function to spread IRQs per CPUs (bsc#1239015).
* net: mana: Add debug logs in MANA network driver (bsc#1246212).
* net: mana: Add handler for hardware servicing events (bsc#1245730
bsc#1251971).
* net: mana: Add MAC address to vPort logs and clarify error messages (git-
fixes).
* net: mana: Add metadata support for xdp mode (git-fixes).
* net: mana: add msix index sharing between EQs (git-fixes).
* net: mana: Add NULL guards in teardown path to prevent panic on attach
failure (git-fixes).
* net: mana: Add standard counter rx_missed_errors (git-fixes).
* net: mana: Add support for auxiliary device servicing events (bsc#1251971).
* net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
* net: mana: Add support for PF device 0x00C1 (bsc#1268237).
* net: mana: Allow irq_setup() to skip cpus for affinity (bsc#1245457).
* net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (bsc#1246203).
* net: mana: Assigning IRQ affinity on HT cores (bsc#1239015).
* net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq()
(git-fixes).
* net: mana: Create separate EQs for each vPort (git-fixes).
* net: mana: Don't overwrite port probe error with add_adev result (git-
fixes).
* net: mana: Drop TX skb on post_work_request failure and unmap resources
(git-fixes).
* net: mana: explain irq_setup() algorithm (bsc#1245457).
* net: mana: Expose additional hardware counters for drop and TC via ethtool
(bsc#1245729).
* net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
* net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 (git-
fixes).
* net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR
(git-fixes).
* net: mana: Fix double destroy_workqueue on service rescan PCI path (git-
fixes).
* net: mana: Fix EQ leak in mana_remove on NULL port (git-fixes).
* net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (bsc#1239015).
* net: mana: Fix memory leak in mana_gd_setup_irqs (bsc#1239015).
* net: mana: fix spelling for mana_gd_deregiser_irq() (git-fixes).
* net: mana: Fix spelling mistake "enforecement" -> "enforcement" (git-fixes).
* net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
(bsc#1265928).
* net: mana: fix use-after-free in add_adev() error path (git-fixes).
* net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering
teardown (git-fixes).
* net: mana: Fix use-after-free in reset service rescan path (git-fixes).
* net: mana: Fix warnings for missing export.h header inclusion (git-fixes).
* net: mana: Guard mana_remove against double invocation (git-fixes).
* net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
(bsc#1269798).
* net: mana: Handle hardware recovery events when probing the device
(bsc#1257466).
* net: mana: Handle Reset Request from MANA NIC (bsc#1245728 bsc#1251971).
* net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
* net: mana: Handle unsupported HWC commands (git-fixes).
* net: mana: hardening: Reject zero max_num_queues from
GDMA_QUERY_MAX_RESOURCES (git-fixes).
* net: mana: hardening: Validate adapter_mtu from MANA_QUERY_DEV_CONFIG (git-
fixes).
* net: mana: hardening: Validate doorbell ID from GDMA_REGISTER_DEVICE
response (git-fixes).
* net: mana: Implement ndo_tx_timeout and serialize queue resets per port
(bsc#1257472).
* net: mana: Init gf_stats_work before potential error paths in probe (git-
fixes).
* net: mana: Init link_change_work before potential error paths in probe (git-
fixes).
* net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1269798).
* net: mana: Move hardware counter stats from per-port to per-VF context (git-
fixes).
* net: mana: Probe rdma device in mana driver (git-fixes).
* net: mana: Record doorbell physical address in PF mode (bsc#1244229).
* net: mana: Reduce waiting time if HWC not responding (bsc#1252266).
* net: mana: remove double CQ cleanup in mana_create_rxq error path (git-
fixes).
* net: mana: Return error code from mana_create_rxq() (git-fixes).
* net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
* net: mana: Set default number of queues to 16 (bsc#1261648).
* net: mana: Set tx_packets to post gso processing packet count (bsc#1245731).
* net: mana: Skip redundant detach on already-detached port (git-fixes).
* net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
* net: mana: Support HW link state events (bsc#1253049).
* net: mana: Switch to page pool for jumbo frames (git-fixes).
* net: mana: Trigger VF reset/recovery on health check failure due to HWC
timeout (bsc#1259580).
* net: mana: Use at least SZ_4K in doorbell ID range check (git-fixes).
* net: mana: use ethtool string helpers (git-fixes).
* net: mana: Use kvmalloc for large RX queue and buffer allocations
(bsc#1266765).
* net: mana: Use mana_cleanup_port_context() for rxq cleanup (git-fixes).
* net: mana: Use pci_name() for debugfs directory naming (git-fixes).
* net: mana: Use per-queue allocation for tx_qp to reduce allocation size
(bsc#1266765).
* net: mana: validate rx_req_idx to prevent out-of-bounds array access
(bsc#1266402).
* net: mana: Validate the packet length reported by the NIC (git-fixes).
* PCI: hv: Correct a comment (git-fixes).
* PCI: hv: Fix ring buffer size calculation (git-fixes).
* PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
* PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
* PCI: hv: Set default NUMA node to 0 for devices without affinity info
(bsc#1261648).
* pkspec-dtb: Fix dtb-al rename.
* posix-cpu-timers: Cleanup the firing logic (bsc#1271912).
* posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del()
(bsc#1271912).
* posix-cpu-timers: Do not arm SIGEV_NONE timers (bsc#1271912).
* posix-cpu-timers: Handle interval timers correctly in timer_get()
(bsc#1271912).
* posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get()
(bsc#1271912).
* posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set()
(bsc#1271912).
* posix-cpu-timers: Make k_itimer::it_active consistent (bsc#1271912).
* posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set()
(bsc#1271912).
* posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set()
(bsc#1271912).
* posix-cpu-timers: Simplify posix_cpu_timer_set() (bsc#1271912).
* posix-cpu-timers: Split up posix_cpu_timer_get() (bsc#1271912).
* posix-cpu-timers: Use @now instead of @val for clarity (bsc#1271912).
* posix-timers: Add proper state tracking (bsc#1271912).
* posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).
* posix-timers: Clarify posix_timer_fn() comments (bsc#1271912).
* posix-timers: Clear overrun in common_timer_set() (bsc#1271912).
* posix-timers: Consolidate signal queueing (bsc#1271912).
* posix-timers: Consolidate timer setup (bsc#1271912).
* posix-timers: Cure si_sys_private race (bsc#1271912).
* posix-timers: Document common_clock_get() correctly (bsc#1271912).
* posix-timers: Expand timer_arm() callbacks with a boolean return value
(bsc#1271912).
* posix-timers: Polish coding style in a few places (bsc#1271912).
* posix-timers: Retrieve interval in common timer_settime() code
(bsc#1271912).
* RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
* RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()
(git-fixes).
* RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
(git-fixes).
* RDMA/mana: Validate rx_hash_key_len (git-fixes).
* RDMA/mana_ib: Access remote atomic for MRs (bsc#1251135).
* RDMA/mana_ib: add additional port counters (bsc#1251135).
* RDMA/mana_ib: Add CQ interrupt support for RAW QP (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Add device statistics support (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Add device-memory support (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Add EQ creation for rnic adapter (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Add port statistics support (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: add support of multiple ports (bsc#1251135).
* RDMA/mana_ib: Adding and deleting GIDs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Allocate PAGE aligned doorbell index (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: check cqe length for kernel CQs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: cleanup the usage of mana_gd_send_request() (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Configure mac address in RNIC (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Create and destroy RC QP (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Create and destroy rnic adapter (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: create and destroy RNIC cqs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Create and destroy UD/GSI QP (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: create EQs for RNIC CQs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: create kernel-level CQs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: create/destroy AH (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Disable RX steering on RSS QP destroy (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Drain send wrs of GSI QP (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Enable RoCE on port 1 (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Ensure variable err is initialized (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: extend mana QP table (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Extend modify QP (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: extend query device (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Fix DSCP value in modify QP (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Fix error code in probe() (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Fix integer overflow during queue creation (bsc#1251135).
* RDMA/mana_ib: Fix missing ret value (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Handle net event for pointing to the current netdev
(bsc#1256690).
* RDMA/mana_ib: helpers to allocate kernel queues (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Implement DMABUF MR support (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: implement get_dma_mr (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Implement port parameters (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: implement req_notify_cq (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: implement uapi for creation of rnic cq (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Implement uapi to create and destroy RC QP (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: indicate CM support (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: initialize err for empty send WR lists (git-fixes).
* RDMA/mana_ib: introduce a helper to remove cq callbacks (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Introduce helpers to create and destroy mana queues
(bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Introduce mana_ib_get_netdev helper function (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Introduce mana_ib_install_cq_cb helper function (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Introduce mdev_to_gc helper function (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Modify QP state (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: polling of CQs for GSI/UD (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Process QP error events in mana_ib (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: query device capabilities (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Query feature_flags bitmask from FW (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: register RDMA device with GDMA (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: remove useless return values from dbg prints (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
* RDMA/mana_ib: request error CQEs when supported (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Set correct device into ib (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: set node_guid (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Support memory windows (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: support of the zero based MRs (bsc#1251135).
* RDMA/mana_ib: Take CQ type from the device type (bsc#1257541).
* RDMA/mana_ib: UD/GSI QP creation for kernel (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: UD/GSI work requests (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: unify mana_ib functions to support any gdma device
(bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed (bsc#1271011
jsc#PED-16573).
* RDMA/mana_ib: Use num_comp_vectors of ib_device (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Use safer allocation function() (bsc#1251135).
* RDMA/mana_ib: Use struct mana_ib_queue for CQs (bsc#1240552 jsc#PED-12576).
* RDMA/mana_ib: Use struct mana_ib_queue for RAW QPs (bsc#1240552
jsc#PED-12576).
* RDMA/mana_ib: Use struct mana_ib_queue for WQs (bsc#1240552 jsc#PED-12576).
* sched/topology: Introduce for_each_numa_hop_mask() (bsc#1239015).
* sched/topology: Introduce sched_numa_hop_mask() (bsc#1239015).
* scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (git-
fixes).
* scsi: storvsc: Remove redundant ternary operators (git-fixes).
* scsi: storvsc: Replace symbolic permissions with octal (git-fixes).
* sctp: validate embedded address parameter length (git-fixes).
* tcp: gso: really support BIG TCP (bsc#1246203).
* time: Switch to hrtimer_setup() (bsc#1271912).
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch SUSE-2026-3617=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-3617=1
## Package List:
* openSUSE Leap 15.5 (x86_64)
* cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* kernel-rt-extra-debuginfo-5.14.21-150500.13.156.1
* kernel-rt-debuginfo-5.14.21-150500.13.156.1
* kernel-rt-extra-5.14.21-150500.13.156.1
* kernel-rt-vdso-debuginfo-5.14.21-150500.13.156.1
* cluster-md-kmp-rt-5.14.21-150500.13.156.1
* kernel-rt-optional-5.14.21-150500.13.156.1
* kernel-rt_debug-debuginfo-5.14.21-150500.13.156.1
* kernel-rt-vdso-5.14.21-150500.13.156.1
* kernel-syms-rt-5.14.21-150500.13.156.1
* reiserfs-kmp-rt-5.14.21-150500.13.156.1
* kernel-rt-devel-5.14.21-150500.13.156.1
* ocfs2-kmp-rt-5.14.21-150500.13.156.1
* kselftests-kmp-rt-5.14.21-150500.13.156.1
* kselftests-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* kernel-rt_debug-vdso-5.14.21-150500.13.156.1
* reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* dlm-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* gfs2-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* kernel-rt_debug-devel-5.14.21-150500.13.156.1
* kernel-rt-livepatch-devel-5.14.21-150500.13.156.1
* gfs2-kmp-rt-5.14.21-150500.13.156.1
* kernel-rt-optional-debuginfo-5.14.21-150500.13.156.1
* kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.156.1
* ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.156.1
* kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.156.1
* kernel-rt-devel-debuginfo-5.14.21-150500.13.156.1
* dlm-kmp-rt-5.14.21-150500.13.156.1
* kernel-rt_debug-debugsource-5.14.21-150500.13.156.1
* kernel-rt-debugsource-5.14.21-150500.13.156.1
* kernel-rt-livepatch-5.14.21-150500.13.156.1
* openSUSE Leap 15.5 (nosrc x86_64)
* kernel-rt-5.14.21-150500.13.156.1
* kernel-rt_debug-5.14.21-150500.13.156.1
* openSUSE Leap 15.5 (noarch)
* kernel-source-rt-5.14.21-150500.13.156.1
* kernel-devel-rt-5.14.21-150500.13.156.1
* SUSE Linux Enterprise Micro 5.5 (nosrc x86_64)
* kernel-rt-5.14.21-150500.13.156.1
* SUSE Linux Enterprise Micro 5.5 (noarch)
* kernel-source-rt-5.14.21-150500.13.156.1
* kernel-devel-rt-5.14.21-150500.13.156.1
* SUSE Linux Enterprise Micro 5.5 (x86_64)
* kernel-rt-debugsource-5.14.21-150500.13.156.1
* kernel-rt-debuginfo-5.14.21-150500.13.156.1
## References:
* https://www.suse.com/security/cve/CVE-2022-4994.html
* https://www.suse.com/security/cve/CVE-2023-2058.html
* https://www.suse.com/security/cve/CVE-2023-53995.html
* https://www.suse.com/security/cve/CVE-2024-38542.html
* https://www.suse.com/security/cve/CVE-2025-21710.html
* https://www.suse.com/security/cve/CVE-2025-21953.html
* https://www.suse.com/security/cve/CVE-2025-54518.html
* https://www.suse.com/security/cve/CVE-2026-31431.html
* https://www.suse.com/security/cve/CVE-2026-31542.html
* https://www.suse.com/security/cve/CVE-2026-31598.html
* https://www.suse.com/security/cve/CVE-2026-31628.html
* https://www.suse.com/security/cve/CVE-2026-31759.html
* https://www.suse.com/security/cve/CVE-2026-43033.html
* https://www.suse.com/security/cve/CVE-2026-43056.html
* https://www.suse.com/security/cve/CVE-2026-43211.html
* https://www.suse.com/security/cve/CVE-2026-43276.html
* https://www.suse.com/security/cve/CVE-2026-43440.html
* https://www.suse.com/security/cve/CVE-2026-46052.html
* https://www.suse.com/security/cve/CVE-2026-46056.html
* https://www.suse.com/security/cve/CVE-2026-46080.html
* https://www.suse.com/security/cve/CVE-2026-46084.html
* https://www.suse.com/security/cve/CVE-2026-46109.html
* https://www.suse.com/security/cve/CVE-2026-46117.html
* https://www.suse.com/security/cve/CVE-2026-46126.html
* https://www.suse.com/security/cve/CVE-2026-46144.html
* https://www.suse.com/security/cve/CVE-2026-46145.html
* https://www.suse.com/security/cve/CVE-2026-46174.html
* https://www.suse.com/security/cve/CVE-2026-46193.html
* https://www.suse.com/security/cve/CVE-2026-46243.html
* https://www.suse.com/security/cve/CVE-2026-46323.html
* https://www.suse.com/security/cve/CVE-2026-46333.html
* https://www.suse.com/security/cve/CVE-2026-52933.html
* https://www.suse.com/security/cve/CVE-2026-52956.html
* https://www.suse.com/security/cve/CVE-2026-52958.html
* https://www.suse.com/security/cve/CVE-2026-52967.html
* https://www.suse.com/security/cve/CVE-2026-52986.html
* https://www.suse.com/security/cve/CVE-2026-53050.html
* https://www.suse.com/security/cve/CVE-2026-53131.html
* https://www.suse.com/security/cve/CVE-2026-53196.html
* https://www.suse.com/security/cve/CVE-2026-53224.html
* https://www.suse.com/security/cve/CVE-2026-53246.html
* https://www.suse.com/security/cve/CVE-2026-53256.html
* https://www.suse.com/security/cve/CVE-2026-53260.html
* https://www.suse.com/security/cve/CVE-2026-53267.html
* https://www.suse.com/security/cve/CVE-2026-53297.html
* https://www.suse.com/security/cve/CVE-2026-53324.html
* https://www.suse.com/security/cve/CVE-2026-53357.html
* https://www.suse.com/security/cve/CVE-2026-53375.html
* https://www.suse.com/security/cve/CVE-2026-53388.html
* https://www.suse.com/security/cve/CVE-2026-53391.html
* https://www.suse.com/security/cve/CVE-2026-53402.html
* https://www.suse.com/security/cve/CVE-2026-63794.html
* https://www.suse.com/security/cve/CVE-2026-63806.html
* https://www.suse.com/security/cve/CVE-2026-63807.html
* https://www.suse.com/security/cve/CVE-2026-63824.html
* https://www.suse.com/security/cve/CVE-2026-63829.html
* https://www.suse.com/security/cve/CVE-2026-63884.html
* https://www.suse.com/security/cve/CVE-2026-63893.html
* https://www.suse.com/security/cve/CVE-2026-63917.html
* https://www.suse.com/security/cve/CVE-2026-63919.html
* https://www.suse.com/security/cve/CVE-2026-63921.html
* https://www.suse.com/security/cve/CVE-2026-63922.html
* https://www.suse.com/security/cve/CVE-2026-63924.html
* https://www.suse.com/security/cve/CVE-2026-63946.html
* https://www.suse.com/security/cve/CVE-2026-63971.html
* https://www.suse.com/security/cve/CVE-2026-63975.html
* https://www.suse.com/security/cve/CVE-2026-63984.html
* https://www.suse.com/security/cve/CVE-2026-63994.html
* https://www.suse.com/security/cve/CVE-2026-64106.html
* https://www.suse.com/security/cve/CVE-2026-64189.html
* https://www.suse.com/security/cve/CVE-2026-64530.html
* https://www.suse.com/security/cve/CVE-2026-64560.html
* https://www.suse.com/security/cve/CVE-2026-64561.html
* https://www.suse.com/security/cve/CVE-2026-64564.html
* https://www.suse.com/security/cve/CVE-2026-64600.html
* https://bugzilla.suse.com/show_bug.cgi?id85845
* https://bugzilla.suse.com/show_bug.cgi?id26591
* https://bugzilla.suse.com/show_bug.cgi?id37888
* https://bugzilla.suse.com/show_bug.cgi?id39015
* https://bugzilla.suse.com/show_bug.cgi?id40552
* https://bugzilla.suse.com/show_bug.cgi?id40727
* https://bugzilla.suse.com/show_bug.cgi?id43603
* https://bugzilla.suse.com/show_bug.cgi?id44229
* https://bugzilla.suse.com/show_bug.cgi?id45457
* https://bugzilla.suse.com/show_bug.cgi?id45728
* https://bugzilla.suse.com/show_bug.cgi?id45729
* https://bugzilla.suse.com/show_bug.cgi?id45730
* https://bugzilla.suse.com/show_bug.cgi?id45731
* https://bugzilla.suse.com/show_bug.cgi?id46203
* https://bugzilla.suse.com/show_bug.cgi?id46212
* https://bugzilla.suse.com/show_bug.cgi?id51135
* https://bugzilla.suse.com/show_bug.cgi?id51971
* https://bugzilla.suse.com/show_bug.cgi?id52266
* https://bugzilla.suse.com/show_bug.cgi?id53049
* https://bugzilla.suse.com/show_bug.cgi?id54767
* https://bugzilla.suse.com/show_bug.cgi?id55616
* https://bugzilla.suse.com/show_bug.cgi?id56690
* https://bugzilla.suse.com/show_bug.cgi?id57466
* https://bugzilla.suse.com/show_bug.cgi?id57472
* https://bugzilla.suse.com/show_bug.cgi?id57541
* https://bugzilla.suse.com/show_bug.cgi?id58718
* https://bugzilla.suse.com/show_bug.cgi?id59580
* https://bugzilla.suse.com/show_bug.cgi?id60347
* https://bugzilla.suse.com/show_bug.cgi?id61648
* https://bugzilla.suse.com/show_bug.cgi?id62573
* https://bugzilla.suse.com/show_bug.cgi?id63010
* https://bugzilla.suse.com/show_bug.cgi?id63718
* https://bugzilla.suse.com/show_bug.cgi?id63788
* https://bugzilla.suse.com/show_bug.cgi?id64013
* https://bugzilla.suse.com/show_bug.cgi?id64053
* https://bugzilla.suse.com/show_bug.cgi?id64076
* https://bugzilla.suse.com/show_bug.cgi?id64089
* https://bugzilla.suse.com/show_bug.cgi?id64387
* https://bugzilla.suse.com/show_bug.cgi?id64558
* https://bugzilla.suse.com/show_bug.cgi?id64779
* https://bugzilla.suse.com/show_bug.cgi?id65308
* https://bugzilla.suse.com/show_bug.cgi?id65928
* https://bugzilla.suse.com/show_bug.cgi?id66238
* https://bugzilla.suse.com/show_bug.cgi?id66402
* https://bugzilla.suse.com/show_bug.cgi?id66414
* https://bugzilla.suse.com/show_bug.cgi?id66758
* https://bugzilla.suse.com/show_bug.cgi?id66765
* https://bugzilla.suse.com/show_bug.cgi?id66850
* https://bugzilla.suse.com/show_bug.cgi?id66913
* https://bugzilla.suse.com/show_bug.cgi?id67375
* https://bugzilla.suse.com/show_bug.cgi?id67384
* https://bugzilla.suse.com/show_bug.cgi?id67435
* https://bugzilla.suse.com/show_bug.cgi?id67494
* https://bugzilla.suse.com/show_bug.cgi?id67584
* https://bugzilla.suse.com/show_bug.cgi?id67596
* https://bugzilla.suse.com/show_bug.cgi?id67656
* https://bugzilla.suse.com/show_bug.cgi?id67715
* https://bugzilla.suse.com/show_bug.cgi?id68029
* https://bugzilla.suse.com/show_bug.cgi?id68237
* https://bugzilla.suse.com/show_bug.cgi?id68750
* https://bugzilla.suse.com/show_bug.cgi?id68989
* https://bugzilla.suse.com/show_bug.cgi?id69172
* https://bugzilla.suse.com/show_bug.cgi?id69174
* https://bugzilla.suse.com/show_bug.cgi?id69181
* https://bugzilla.suse.com/show_bug.cgi?id69188
* https://bugzilla.suse.com/show_bug.cgi?id69289
* https://bugzilla.suse.com/show_bug.cgi?id69512
* https://bugzilla.suse.com/show_bug.cgi?id69513
* https://bugzilla.suse.com/show_bug.cgi?id69577
* https://bugzilla.suse.com/show_bug.cgi?id69731
* https://bugzilla.suse.com/show_bug.cgi?id69773
* https://bugzilla.suse.com/show_bug.cgi?id69798
* https://bugzilla.suse.com/show_bug.cgi?id69986
* https://bugzilla.suse.com/show_bug.cgi?id69988
* https://bugzilla.suse.com/show_bug.cgi?id69993
* https://bugzilla.suse.com/show_bug.cgi?id69997
* https://bugzilla.suse.com/show_bug.cgi?id70257
* https://bugzilla.suse.com/show_bug.cgi?id71011
* https://bugzilla.suse.com/show_bug.cgi?id71526
* https://bugzilla.suse.com/show_bug.cgi?id71825
* https://bugzilla.suse.com/show_bug.cgi?id71866
* https://bugzilla.suse.com/show_bug.cgi?id71899
* https://bugzilla.suse.com/show_bug.cgi?id71904
* https://bugzilla.suse.com/show_bug.cgi?id71908
* https://bugzilla.suse.com/show_bug.cgi?id71912
* https://bugzilla.suse.com/show_bug.cgi?id71964
* https://bugzilla.suse.com/show_bug.cgi?id72176
* https://bugzilla.suse.com/show_bug.cgi?id72180
* https://bugzilla.suse.com/show_bug.cgi?id72207
* https://bugzilla.suse.com/show_bug.cgi?id72242
* https://bugzilla.suse.com/show_bug.cgi?id72263
* https://bugzilla.suse.com/show_bug.cgi?id72268
* https://bugzilla.suse.com/show_bug.cgi?id72573
* https://bugzilla.suse.com/show_bug.cgi?id72607
* https://bugzilla.suse.com/show_bug.cgi?id72665
* https://bugzilla.suse.com/show_bug.cgi?id72678
* https://bugzilla.suse.com/show_bug.cgi?id72693
* https://bugzilla.suse.com/show_bug.cgi?id72694
* https://bugzilla.suse.com/show_bug.cgi?id72855
* https://bugzilla.suse.com/show_bug.cgi?id72865
* https://bugzilla.suse.com/show_bug.cgi?id72904
* https://bugzilla.suse.com/show_bug.cgi?id72907
* https://bugzilla.suse.com/show_bug.cgi?id72918
* https://bugzilla.suse.com/show_bug.cgi?id73004
* https://bugzilla.suse.com/show_bug.cgi?id73035
* https://bugzilla.suse.com/show_bug.cgi?id73097
* https://bugzilla.suse.com/show_bug.cgi?id73231
* https://bugzilla.suse.com/show_bug.cgi?id74072
* https://jira.suse.com/browse/PED-12576
* https://jira.suse.com/browse/PED-16573
openSUSE-SU-2026:21573-1: important: Security update for himmelblau
openSUSE security update: security update for himmelblau
-------------------------------------------------------------
Announcement ID: openSUSE-SU-2026:21573-1
Rating: important
References:
* bsc#1270946
* bsc#1270985
* bsc#1273910
* bsc#1273911
* bsc#1273912
Cross-References:
* CVE-2026-45784
CVSS scores:
* CVE-2026-45784 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-45784 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Affected Products:
openSUSE Leap 16.0
-------------------------------------------------------------
An update that solves one vulnerability and has 5 bug fixes can now be installed.
Description:
This update for himmelblau fixes the following issues:
Update to version 2.3.14+git0.e23b4c54.
Security issues fixed:
- CVE-2026-45784: incorrect sizing of output buffers in `CipherCtxRef::cipher_update_inplace` when used with
AES key-wrap-with-padding ciphers can lead to attacker-controlled heap corruption (bsc#1270985).
- Arbitrary HTTP or HTTPS URLs classified as Office documents based on an attacker-controlled file query parameters are
forwarded to Electron applications and allow for code execution through Electron (bsc#1273910).
- Directory-provided RFC2307 user identifiers accepted without exclusion of systemd's dynamic-user range allows for
daemon impersonation and command execution through the task helper (bsc#1273911).
- Daemon acts on Hello PIN enrollment requests whose identity claims it never cryptographically verifies and allows for
local authentication bypass (bsc#1273912).
Other updates and bugfixes:
- Version 2.3.14+git0.e23b4c54:
* fix(`nss`): avoid locked shadow entries
* fix(`deps`): update libhimmelblau lockfile
* fix(`pam`): make account denials terminal
* `debian`: make the `pam_allow_groups` denial terminal in the account phase
- Version 2.3.13:
* Update `cargo vet` audits for backport
* Fix `cargo-fuzz` install in fuzz CI
* `cargo vet`
* Update `ldap3_proto` to 0.7.1
* Update `openssl`
- Version 2.3.12:
* Remove invalid `himmelblau.conf` example info
* Fix SSHd configuration load order on Fedora/RHEL systems
* `himmelblau-init-hsm-pin`: don't bind the `hsm-pin` to PCR7
* `qr-greeter`: support GNOME Shell 50
* Update `libhimmelblau` to latest version
* deps(`rust`): bump `tonic` in the `all-cargo-updates` group across 1 directory
* `cargo audit`
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-1455=1
Package List:
- openSUSE Leap 16.0:
himmelblau-2.3.14+git0.e23b4c54-160000.1.1
himmelblau-qr-greeter-2.3.14+git0.e23b4c54-160000.1.1
himmelblau-sshd-config-2.3.14+git0.e23b4c54-160000.1.1
himmelblau-sso-2.3.14+git0.e23b4c54-160000.1.1
libnss_himmelblau2-2.3.14+git0.e23b4c54-160000.1.1
pam-himmelblau-2.3.14+git0.e23b4c54-160000.1.1
References:
* https://www.suse.com/security/cve/CVE-2026-45784.html
openSUSE-SU-2026:11506-1: moderate: kernel-devel-7.1.8-1.1 on GA media
# kernel-devel-7.1.8-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11506-1
Rating: moderate
Cross-References:
* CVE-2026-68081
* CVE-2026-68082
CVSS scores:
* CVE-2026-68081 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-68081 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-68082 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-68082 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves 2 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the kernel-devel-7.1.8-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* kernel-devel 7.1.8-1.1
* kernel-macros 7.1.8-1.1
* kernel-source 7.1.8-1.1
* kernel-source-vanilla 7.1.8-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-68081.html
* https://www.suse.com/security/cve/CVE-2026-68082.html
openSUSE-SU-2026:11509-1: moderate: python3-ansible-compat-26.8.0-1.1 on GA media
# python3-ansible-compat-26.8.0-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11509-1
Rating: moderate
Cross-References:
* CVE-2026-11332
CVSS scores:
* CVE-2026-11332 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the python3-ansible-compat-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* python3-ansible-compat 26.8.0-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-11332.html
openSUSE-SU-2026:11502-1: moderate: 7zip-26.02-2.1 on GA media
# 7zip-26.02-2.1 on GA media
Announcement ID: openSUSE-SU-2026:11502-1
Rating: moderate
Cross-References:
* CVE-2026-48092
* CVE-2026-48101
* CVE-2026-48102
* CVE-2026-48103
* CVE-2026-48104
* CVE-2026-48111
* CVE-2026-48112
CVSS scores:
* CVE-2026-48092 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
* CVE-2026-48092 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-48101 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
* CVE-2026-48101 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-48102 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
* CVE-2026-48102 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-48103 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-48103 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-48104 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
* CVE-2026-48104 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-48111 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-48111 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-48112 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-48112 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves 7 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the 7zip-26.02-2.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* 7zip 26.02-2.1
## References:
* https://www.suse.com/security/cve/CVE-2026-48092.html
* https://www.suse.com/security/cve/CVE-2026-48101.html
* https://www.suse.com/security/cve/CVE-2026-48102.html
* https://www.suse.com/security/cve/CVE-2026-48103.html
* https://www.suse.com/security/cve/CVE-2026-48104.html
* https://www.suse.com/security/cve/CVE-2026-48111.html
* https://www.suse.com/security/cve/CVE-2026-48112.html
openSUSE-SU-2026:11510-1: moderate: python313-nltk-3.10.2-1.1 on GA media
# python313-nltk-3.10.2-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11510-1
Rating: moderate
Cross-References:
* CVE-2026-12372
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the python313-nltk-3.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* python313-nltk 3.10.2-1.1
* python314-nltk 3.10.2-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-12372.html
openSUSE-SU-2026:11503-1: moderate: ansible-lint-26.8.0-1.1 on GA media
# ansible-lint-26.8.0-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11503-1
Rating: moderate
Cross-References:
* CVE-2026-11332
CVSS scores:
* CVE-2026-11332 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* ansible-lint 26.8.0-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-11332.html
openSUSE-SU-2026:11508-1: moderate: pgadmin4-9.17-1.1 on GA media
# pgadmin4-9.17-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11508-1
Rating: moderate
Cross-References:
* CVE-2026-12044
* CVE-2026-12045
* CVE-2026-12046
* CVE-2026-12047
* CVE-2026-12048
* CVE-2026-12049
* CVE-2026-12050
* CVE-2026-1707
* CVE-2026-17347
* CVE-2026-17349
* CVE-2026-17350
* CVE-2026-17351
* CVE-2026-17566
* CVE-2026-7813
* CVE-2026-7814
* CVE-2026-7815
* CVE-2026-7816
* CVE-2026-7817
* CVE-2026-7818
* CVE-2026-7819
* CVE-2026-7820
CVSS scores:
* CVE-2026-12044 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-12044 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-12045 ( SUSE ): 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
* CVE-2026-12045 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-12046 ( SUSE ): 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-12046 ( SUSE ): 9.5 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-12047 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
* CVE-2026-12047 ( SUSE ): 2 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12048 ( SUSE ): 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
* CVE-2026-12048 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
* CVE-2026-12049 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
* CVE-2026-12049 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12050 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-12050 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
* CVE-2026-1707 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
* CVE-2026-1707 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
* CVE-2026-17347 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-17347 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-17349 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
* CVE-2026-17349 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
* CVE-2026-17350 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-17350 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-17351 ( SUSE ): 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
* CVE-2026-17351 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-17566 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-17566 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-7813 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7813 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7814 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
* CVE-2026-7814 ( SUSE ): 4.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
* CVE-2026-7815 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7815 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7816 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7816 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7817 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-7817 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-7818 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7818 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7819 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-7819 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7820 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-7820 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves 21 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* pgadmin4 9.17-1.1
* pgadmin4-desktop 9.17-1.1
* pgadmin4-doc 9.17-1.1
* pgadmin4-web-uwsgi 9.17-1.1
* system-user-pgadmin 9.17-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-12044.html
* https://www.suse.com/security/cve/CVE-2026-12045.html
* https://www.suse.com/security/cve/CVE-2026-12046.html
* https://www.suse.com/security/cve/CVE-2026-12047.html
* https://www.suse.com/security/cve/CVE-2026-12048.html
* https://www.suse.com/security/cve/CVE-2026-12049.html
* https://www.suse.com/security/cve/CVE-2026-12050.html
* https://www.suse.com/security/cve/CVE-2026-1707.html
* https://www.suse.com/security/cve/CVE-2026-17347.html
* https://www.suse.com/security/cve/CVE-2026-17349.html
* https://www.suse.com/security/cve/CVE-2026-17350.html
* https://www.suse.com/security/cve/CVE-2026-17351.html
* https://www.suse.com/security/cve/CVE-2026-17566.html
* https://www.suse.com/security/cve/CVE-2026-7813.html
* https://www.suse.com/security/cve/CVE-2026-7814.html
* https://www.suse.com/security/cve/CVE-2026-7815.html
* https://www.suse.com/security/cve/CVE-2026-7816.html
* https://www.suse.com/security/cve/CVE-2026-7817.html
* https://www.suse.com/security/cve/CVE-2026-7818.html
* https://www.suse.com/security/cve/CVE-2026-7819.html
* https://www.suse.com/security/cve/CVE-2026-7820.html
openSUSE-SU-2026:11507-1: moderate: molecule-26.8.0-1.1 on GA media
# molecule-26.8.0-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11507-1
Rating: moderate
Cross-References:
* CVE-2026-11332
CVSS scores:
* CVE-2026-11332 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the molecule-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* molecule 26.8.0-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-11332.html
openSUSE-SU-2026:11504-1: moderate: dracut-112+suse.29.gc0c5e1d-1.1 on GA media
# dracut-112+suse.29.gc0c5e1d-1.1 on GA media
Announcement ID: openSUSE-SU-2026:11504-1
Rating: moderate
Cross-References:
* CVE-2026-15816
CVSS scores:
* CVE-2026-15816 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* dracut 112+suse.29.gc0c5e1d-1.1
* dracut-extra 112+suse.29.gc0c5e1d-1.1
* dracut-fips 112+suse.29.gc0c5e1d-1.1
* dracut-ima 112+suse.29.gc0c5e1d-1.1
* dracut-tools 112+suse.29.gc0c5e1d-1.1
## References:
* https://www.suse.com/security/cve/CVE-2026-15816.html
