Linux Kernel, Firefox ESR, Chromium, and python-aiohttp updates for SUSE

SUSE 5717 Published 2026-07-24 07:19 by Philipp Esselbach

News

openSUSE-SU-2026:21395-1: important: Security update for trivy

openSUSE security update: security update for trivy
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21395-1
Rating: important
References:

* bsc#1266495
* bsc#1271658
* bsc#1271670

Cross-References:

* CVE-2026-39821
* CVE-2026-50151
* CVE-2026-56852

CVSS scores:

* CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56852 ( SUSE ): 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description:

This update for trivy fixes the following issues

- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266495).
- CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271658).
- CVE-2026-56852: trivy: infinite loop on truncated/invalid UTF-8 input (bsc#1271670).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1305=1

Package List:

- openSUSE Leap 16.0:

trivy-0.72.0-160000.2.1

References:

* https://www.suse.com/security/cve/CVE-2026-39821.html
* https://www.suse.com/security/cve/CVE-2026-50151.html
* https://www.suse.com/security/cve/CVE-2026-56852.html

openSUSE-SU-2026:21393-1: moderate: Security update for gawk

openSUSE security update: security update for gawk
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21393-1
Rating: moderate
References:

* bsc#1271351
* bsc#1271352
* bsc#1271354

Cross-References:

* CVE-2026-40467
* CVE-2026-40468
* CVE-2026-40553

CVSS scores:

* CVE-2026-40467 ( SUSE ): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-40467 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-40468 ( SUSE ): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-40468 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L
* CVE-2026-40553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-40553 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description:

This update for gawk fixes the following issues:

- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash
(bsc#1271351).
- CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permit heap metadata manipulation and host
memory exhaustion (bsc#1271352).
- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash
(bsc#1271354).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1303=1

Package List:

- openSUSE Leap 16.0:

gawk-5.3.2-160000.3.1

References:

* https://www.suse.com/security/cve/CVE-2026-40467.html
* https://www.suse.com/security/cve/CVE-2026-40468.html
* https://www.suse.com/security/cve/CVE-2026-40553.html

openSUSE-SU-2026:21391-1: moderate: Security update for ImageMagick

openSUSE security update: security update for imagemagick
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21391-1
Rating: moderate
References:

* bsc#1268640
* bsc#1270006
* bsc#1270081
* bsc#1271100
* bsc#1271293
* bsc#1271294
* bsc#1271311
* bsc#1271312
* bsc#1271313
* bsc#1271314
* bsc#1271315
* bsc#1271316

Cross-References:

* CVE-2026-55628
* CVE-2026-56362
* CVE-2026-56366
* CVE-2026-56372
* CVE-2026-56373
* CVE-2026-56377
* CVE-2026-61465
* CVE-2026-61857
* CVE-2026-61858
* CVE-2026-61861
* CVE-2026-61870

CVSS scores:

* CVE-2026-55628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-55628 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-56362 ( SUSE ): 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
* CVE-2026-56362 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-56366 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-56366 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-56372 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-56372 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-56373 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-56373 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-56377 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-56377 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-61465 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-61465 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-61857 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-61857 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-61858 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-61858 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-61861 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-61861 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-61870 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-61870 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 11 vulnerabilities and has 12 bug fixes can now be installed.

Description:

This update for ImageMagick fixes the following issues

- CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
- CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
- CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
- CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
- CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
- CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1300=1

Package List:

- openSUSE Leap 16.0:

ImageMagick-7.1.2.0-160000.12.1
ImageMagick-config-7-SUSE-7.1.2.0-160000.12.1
ImageMagick-config-7-upstream-limited-7.1.2.0-160000.12.1
ImageMagick-config-7-upstream-open-7.1.2.0-160000.12.1
ImageMagick-config-7-upstream-secure-7.1.2.0-160000.12.1
ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.12.1
ImageMagick-devel-7.1.2.0-160000.12.1
ImageMagick-doc-7.1.2.0-160000.12.1
ImageMagick-extra-7.1.2.0-160000.12.1
libMagick++-7_Q16HDRI5-7.1.2.0-160000.12.1
libMagick++-devel-7.1.2.0-160000.12.1
libMagickCore-7_Q16HDRI10-7.1.2.0-160000.12.1
libMagickWand-7_Q16HDRI10-7.1.2.0-160000.12.1
perl-PerlMagick-7.1.2.0-160000.12.1

References:

* https://www.suse.com/security/cve/CVE-2026-55628.html
* https://www.suse.com/security/cve/CVE-2026-56362.html
* https://www.suse.com/security/cve/CVE-2026-56366.html
* https://www.suse.com/security/cve/CVE-2026-56372.html
* https://www.suse.com/security/cve/CVE-2026-56373.html
* https://www.suse.com/security/cve/CVE-2026-56377.html
* https://www.suse.com/security/cve/CVE-2026-61465.html
* https://www.suse.com/security/cve/CVE-2026-61857.html
* https://www.suse.com/security/cve/CVE-2026-61858.html
* https://www.suse.com/security/cve/CVE-2026-61861.html
* https://www.suse.com/security/cve/CVE-2026-61870.html

SUSE-SU-2026:3201-1: low: Security update for GraphicsMagick

# Security update for GraphicsMagick

Announcement ID: SUSE-SU-2026:3201-1
Release Date: 2026-07-22T18:53:49Z
Rating: low
References:

* bsc#1271293

Cross-References:

* CVE-2026-61870

CVSS scores:

* CVE-2026-61870 ( SUSE ): 2.1
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-61870 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-61870 ( NVD ): 2.1
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-61870 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-61870 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Desktop 15 SP7
* SUSE Linux Enterprise Real Time 15 SP7
* SUSE Linux Enterprise Server 15 SP7
* SUSE Linux Enterprise Server for SAP Applications 15 SP7
* SUSE Package Hub 15 15-SP7

An update that solves one vulnerability can now be installed.

## Description:

This update for GraphicsMagick fixes the following issue

* CVE-2026-61870: Memory leak in VIFF encoder when allocation fails
(bsc#1271293).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Package Hub 15 15-SP7
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3201=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3201=1

## Package List:

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.36.1
* libGraphicsMagick-Q16-3-1.3.42-150600.3.36.1
* libGraphicsMagick3-config-1.3.42-150600.3.36.1
* GraphicsMagick-debugsource-1.3.42-150600.3.36.1
* libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.36.1
* GraphicsMagick-debuginfo-1.3.42-150600.3.36.1
* libGraphicsMagickWand-Q16-2-1.3.42-150600.3.36.1
* perl-GraphicsMagick-1.3.42-150600.3.36.1
* libGraphicsMagick++-Q16-12-1.3.42-150600.3.36.1
* GraphicsMagick-1.3.42-150600.3.36.1
* GraphicsMagick-devel-1.3.42-150600.3.36.1
* libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.36.1
* libGraphicsMagick++-devel-1.3.42-150600.3.36.1
* perl-GraphicsMagick-debuginfo-1.3.42-150600.3.36.1
* SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64)
* libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.36.1
* libGraphicsMagick-Q16-3-1.3.42-150600.3.36.1
* libGraphicsMagick3-config-1.3.42-150600.3.36.1
* libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.36.1
* GraphicsMagick-debuginfo-1.3.42-150600.3.36.1
* GraphicsMagick-debugsource-1.3.42-150600.3.36.1
* libGraphicsMagickWand-Q16-2-1.3.42-150600.3.36.1
* GraphicsMagick-1.3.42-150600.3.36.1
* libGraphicsMagick++-Q16-12-1.3.42-150600.3.36.1
* perl-GraphicsMagick-1.3.42-150600.3.36.1
* GraphicsMagick-devel-1.3.42-150600.3.36.1
* libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.36.1
* libGraphicsMagick++-devel-1.3.42-150600.3.36.1
* perl-GraphicsMagick-debuginfo-1.3.42-150600.3.36.1

## References:

* https://www.suse.com/security/cve/CVE-2026-61870.html
* https://bugzilla.suse.com/show_bug.cgi?id71293

SUSE-SU-2026:3199-1: moderate: Security update for multipath-tools

# Security update for multipath-tools

Announcement ID: SUSE-SU-2026:3199-1
Release Date: 2026-07-22T18:46:43Z
Rating: moderate
References:

* bsc#1268144
* bsc#1268145

Affected Products:

* openSUSE Leap 15.4
* SUSE Linux Enterprise Micro 5.3
* SUSE Linux Enterprise Micro 5.4
* SUSE Linux Enterprise Micro for Rancher 5.3
* SUSE Linux Enterprise Micro for Rancher 5.4

An update that has two security fixes can now be installed.

## Description:

This update for multipath-tools fixes the following issues

* kpartx: integer overflow in the GPT partition table size calculation can
lead to heap OOB read via crafted USB device or disk image(bsc#1268145).
* kpartx: missing bounds check can lead to a DASD VOL1 unbounded array write
via a crafted DASD disk with more than 256 consecutive format labels
(bsc#1268144).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-3199=1

* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-3199=1

* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-3199=1

* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-3199=1

* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-3199=1

## Package List:

* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
* kpartx-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debugsource-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-0.9.0+168+suse.54b6b26-150400.4.22.1
* SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)
* kpartx-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debugsource-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-0.9.0+168+suse.54b6b26-150400.4.22.1
* SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
* kpartx-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debugsource-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-0.9.0+168+suse.54b6b26-150400.4.22.1
* SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
* kpartx-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debugsource-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-0.9.0+168+suse.54b6b26-150400.4.22.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* libdmmp-devel-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* libdmmp0_2_0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* libdmmp0_2_0-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-0.9.0+168+suse.54b6b26-150400.4.22.1
* kpartx-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-devel-0.9.0+168+suse.54b6b26-150400.4.22.1
* multipath-tools-debugsource-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-debuginfo-0.9.0+168+suse.54b6b26-150400.4.22.1
* libmpath0-0.9.0+168+suse.54b6b26-150400.4.22.1

## References:

* https://bugzilla.suse.com/show_bug.cgi?id68144
* https://bugzilla.suse.com/show_bug.cgi?id68145

openSUSE-SU-2026:0257-1: important: Security update for chromium

openSUSE Security Update: Security update for chromium
_______________________________

Announcement ID: openSUSE-SU-2026:0257-1
Rating: important
References: #1272156
Cross-References: CVE-2026-16413 CVE-2026-16414 CVE-2026-16415
CVE-2026-16416 CVE-2026-16417 CVE-2026-16418
CVE-2026-16419 CVE-2026-16420 CVE-2026-16421
CVE-2026-16422 CVE-2026-16423 CVE-2026-16424

Affected Products:
openSUSE Backports SLE-15-SP7
_______________________________

An update that fixes 12 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

- Chromium 150.0.7871.181 (boo#1272156):
* CVE-2026-16420: Type Confusion in WebAudio
* CVE-2026-16421: Inappropriate implementation in WebAudio
* CVE-2026-16413: Out of bounds write in ANGLE
* CVE-2026-16414: Insufficient validation of untrusted input in
Chromecast
* CVE-2026-16415: Insufficient validation of untrusted input in
Extensions
* CVE-2026-16416: Integer overflow in Chromecast
* CVE-2026-16417: Uninitialized Use in Skia
* CVE-2026-16418: Stack buffer overflow in V8
* CVE-2026-16419: Out of bounds read and write in ANGLE
* CVE-2026-16422: Insufficient validation of untrusted input in
Certificate
* CVE-2026-16423: Use after free in UI
* CVE-2026-16424: Use after free in GPU

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2026-257=1

Package List:

- openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):

chromedriver-150.0.7871.181-bp157.2.193.1
chromium-150.0.7871.181-bp157.2.193.1

References:

https://www.suse.com/security/cve/CVE-2026-16413.html
https://www.suse.com/security/cve/CVE-2026-16414.html
https://www.suse.com/security/cve/CVE-2026-16415.html
https://www.suse.com/security/cve/CVE-2026-16416.html
https://www.suse.com/security/cve/CVE-2026-16417.html
https://www.suse.com/security/cve/CVE-2026-16418.html
https://www.suse.com/security/cve/CVE-2026-16419.html
https://www.suse.com/security/cve/CVE-2026-16420.html
https://www.suse.com/security/cve/CVE-2026-16421.html
https://www.suse.com/security/cve/CVE-2026-16422.html
https://www.suse.com/security/cve/CVE-2026-16423.html
https://www.suse.com/security/cve/CVE-2026-16424.html
https://bugzilla.suse.com/1272156

openSUSE-SU-2026:11327-1: moderate: apache-sshd-2.19.0-2.1 on GA media

# apache-sshd-2.19.0-2.1 on GA media

Announcement ID: openSUSE-SU-2026:11327-1
Rating: moderate

Cross-References:

* CVE-2026-56452
* CVE-2026-56623
* CVE-2026-56624
* CVE-2026-58624

CVSS scores:

* CVE-2026-56452 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-56623 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
* CVE-2026-56624 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
* CVE-2026-58624 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected Products:

* openSUSE Tumbleweed

An update that solves 4 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* apache-sshd 2.19.0-2.1
* apache-sshd-javadoc 2.19.0-2.1

## References:

* https://www.suse.com/security/cve/CVE-2026-56452.html
* https://www.suse.com/security/cve/CVE-2026-56623.html
* https://www.suse.com/security/cve/CVE-2026-56624.html
* https://www.suse.com/security/cve/CVE-2026-58624.html

openSUSE-SU-2026:11331-1: moderate: google-osconfig-agent-20260708.00-2.1 on GA media

# google-osconfig-agent-20260708.00-2.1 on GA media

Announcement ID: openSUSE-SU-2026:11331-1
Rating: moderate

Cross-References:

* CVE-2026-39821

CVSS scores:

* CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the google-osconfig-agent-20260708.00-2.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* google-osconfig-agent 20260708.00-2.1

## References:

* https://www.suse.com/security/cve/CVE-2026-39821.html

openSUSE-SU-2026:11329-1: moderate: firefox-esr-140.13.0-1.1 on GA media

# firefox-esr-140.13.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11329-1
Rating: moderate

Cross-References:

* CVE-2026-15718
* CVE-2026-15719
* CVE-2026-16349
* CVE-2026-16350
* CVE-2026-16351
* CVE-2026-16352
* CVE-2026-16353
* CVE-2026-16354
* CVE-2026-16355
* CVE-2026-16356
* CVE-2026-16357
* CVE-2026-16358
* CVE-2026-16359
* CVE-2026-16360
* CVE-2026-16361
* CVE-2026-16362
* CVE-2026-16363
* CVE-2026-16368
* CVE-2026-16369
* CVE-2026-16371
* CVE-2026-16374
* CVE-2026-16375
* CVE-2026-16377
* CVE-2026-16379
* CVE-2026-16381
* CVE-2026-16383
* CVE-2026-16387
* CVE-2026-16390
* CVE-2026-16391
* CVE-2026-16396
* CVE-2026-16405
* CVE-2026-16412

Affected Products:

* openSUSE Tumbleweed

An update that solves 32 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* firefox-esr 140.13.0-1.1
* firefox-esr-branding-upstream 140.13.0-1.1
* firefox-esr-translations-common 140.13.0-1.1
* firefox-esr-translations-other 140.13.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-15718.html
* https://www.suse.com/security/cve/CVE-2026-15719.html
* https://www.suse.com/security/cve/CVE-2026-16349.html
* https://www.suse.com/security/cve/CVE-2026-16350.html
* https://www.suse.com/security/cve/CVE-2026-16351.html
* https://www.suse.com/security/cve/CVE-2026-16352.html
* https://www.suse.com/security/cve/CVE-2026-16353.html
* https://www.suse.com/security/cve/CVE-2026-16354.html
* https://www.suse.com/security/cve/CVE-2026-16355.html
* https://www.suse.com/security/cve/CVE-2026-16356.html
* https://www.suse.com/security/cve/CVE-2026-16357.html
* https://www.suse.com/security/cve/CVE-2026-16358.html
* https://www.suse.com/security/cve/CVE-2026-16359.html
* https://www.suse.com/security/cve/CVE-2026-16360.html
* https://www.suse.com/security/cve/CVE-2026-16361.html
* https://www.suse.com/security/cve/CVE-2026-16362.html
* https://www.suse.com/security/cve/CVE-2026-16363.html
* https://www.suse.com/security/cve/CVE-2026-16368.html
* https://www.suse.com/security/cve/CVE-2026-16369.html
* https://www.suse.com/security/cve/CVE-2026-16371.html
* https://www.suse.com/security/cve/CVE-2026-16374.html
* https://www.suse.com/security/cve/CVE-2026-16375.html
* https://www.suse.com/security/cve/CVE-2026-16377.html
* https://www.suse.com/security/cve/CVE-2026-16379.html
* https://www.suse.com/security/cve/CVE-2026-16381.html
* https://www.suse.com/security/cve/CVE-2026-16383.html
* https://www.suse.com/security/cve/CVE-2026-16387.html
* https://www.suse.com/security/cve/CVE-2026-16390.html
* https://www.suse.com/security/cve/CVE-2026-16391.html
* https://www.suse.com/security/cve/CVE-2026-16396.html
* https://www.suse.com/security/cve/CVE-2026-16405.html
* https://www.suse.com/security/cve/CVE-2026-16412.html

openSUSE-SU-2026:11324-1: moderate: afterburn-5.10.0.git73.b97f772-2.1 on GA media

# afterburn-5.10.0.git73.b97f772-2.1 on GA media

Announcement ID: openSUSE-SU-2026:11324-1
Rating: moderate

Cross-References:

* CVE-2025-55159

CVSS scores:

* CVE-2025-55159 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
* CVE-2025-55159 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* afterburn 5.10.0.git73.b97f772-2.1
* afterburn-dracut 5.10.0.git73.b97f772-2.1

## References:

* https://www.suse.com/security/cve/CVE-2025-55159.html

openSUSE-SU-2026:21385-1: low: Security update for gpg2

openSUSE security update: security update for gpg2
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21385-1
Rating: low
References:

* bsc#1269279

Cross-References:

* CVE-2026-57062

CVSS scores:

* CVE-2026-57062 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-57062 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has one bug fix can now be installed.

Description:

This update for gpg2 fixes the following issue:

- CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1288=1

Package List:

- openSUSE Leap 16.0:

dirmngr-2.5.5-160000.6.1
gpg2-2.5.5-160000.6.1
gpg2-lang-2.5.5-160000.6.1
gpg2-tpm-2.5.5-160000.6.1

References:

* https://www.suse.com/security/cve/CVE-2026-57062.html

openSUSE-SU-2026:21388-1: important: Security update for the Linux Kernel

openSUSE security update: security update for the linux kernel
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21388-1
Rating: important
References:

* bsc#1149651
* bsc#1204315
* bsc#1236743
* bsc#1255029
* bsc#1257506
* bsc#1258538
* bsc#1259800
* bsc#1260565
* bsc#1261250
* bsc#1261256
* bsc#1261562
* bsc#1261604
* bsc#1262085
* bsc#1262392
* bsc#1262430
* bsc#1262618
* bsc#1262620
* bsc#1262674
* bsc#1262748
* bsc#1262765
* bsc#1262798
* bsc#1263057
* bsc#1263072
* bsc#1263133
* bsc#1263137
* bsc#1263143
* bsc#1263169
* bsc#1263178
* bsc#1263319
* bsc#1263563
* bsc#1263568
* bsc#1263573
* bsc#1263578
* bsc#1263581
* bsc#1263796
* bsc#1263930
* bsc#1263934
* bsc#1263993
* bsc#1263996
* bsc#1263998
* bsc#1264001
* bsc#1264007
* bsc#1264010
* bsc#1264012
* bsc#1264015
* bsc#1264045
* bsc#1264056
* bsc#1264067
* bsc#1264084
* bsc#1264145
* bsc#1264230
* bsc#1264231
* bsc#1264236
* bsc#1264239
* bsc#1264241
* bsc#1264250
* bsc#1264254
* bsc#1264258
* bsc#1264261
* bsc#1264263
* bsc#1264266
* bsc#1264270
* bsc#1264286
* bsc#1264294
* bsc#1264295
* bsc#1264302
* bsc#1264304
* bsc#1264320
* bsc#1264328
* bsc#1264333
* bsc#1264337
* bsc#1264372
* bsc#1264386
* bsc#1264429
* bsc#1264449
* bsc#1264532
* bsc#1264544
* bsc#1264545
* bsc#1264548
* bsc#1264549
* bsc#1264556
* bsc#1264561
* bsc#1264580
* bsc#1264595
* bsc#1264603
* bsc#1264610
* bsc#1264612
* bsc#1264614
* bsc#1264624
* bsc#1264643
* bsc#1264734
* bsc#1264740
* bsc#1264741
* bsc#1264744
* bsc#1264763
* bsc#1264789
* bsc#1264790
* bsc#1264794
* bsc#1264852
* bsc#1264974
* bsc#1264978
* bsc#1264997
* bsc#1265000
* bsc#1265005
* bsc#1265020
* bsc#1265023
* bsc#1265073
* bsc#1265079
* bsc#1265082
* bsc#1265084
* bsc#1265091
* bsc#1265097
* bsc#1265103
* bsc#1265112
* bsc#1265113
* bsc#1265123
* bsc#1265128
* bsc#1265129
* bsc#1265142
* bsc#1265143
* bsc#1265628
* bsc#1265629
* bsc#1266008
* bsc#1266214
* bsc#1266283
* bsc#1266284
* bsc#1266290
* bsc#1266390
* bsc#1266396
* bsc#1266397
* bsc#1266398
* bsc#1266452
* bsc#1266458
* bsc#1266686
* bsc#1266693
* bsc#1266697
* bsc#1266698
* bsc#1266700
* bsc#1266704
* bsc#1266705
* bsc#1266717
* bsc#1266718
* bsc#1266722
* bsc#1266726
* bsc#1266734
* bsc#1266740
* bsc#1266750
* bsc#1266754
* bsc#1266761
* bsc#1266773
* bsc#1266805
* bsc#1266830
* bsc#1266838
* bsc#1266840
* bsc#1266847
* bsc#1266878
* bsc#1266883
* bsc#1266892
* bsc#1266893
* bsc#1266895
* bsc#1266899
* bsc#1266903
* bsc#1266916
* bsc#1266922
* bsc#1266925
* bsc#1266929
* bsc#1266933
* bsc#1267208
* bsc#1267218
* bsc#1267228
* bsc#1267238
* bsc#1267251
* bsc#1267360
* bsc#1267361
* bsc#1267365
* bsc#1267369
* bsc#1267387
* bsc#1267419
* bsc#1267427
* bsc#1267431
* bsc#1267437
* bsc#1267458
* bsc#1267493
* bsc#1267505
* bsc#1267548
* bsc#1267582
* bsc#1267591
* bsc#1267600
* bsc#1267618
* bsc#1267624
* bsc#1267626
* bsc#1267628
* bsc#1267635
* bsc#1267637
* bsc#1267640
* bsc#1267654
* bsc#1267682
* bsc#1267684
* bsc#1267685
* bsc#1267697
* bsc#1267717
* bsc#1267722
* bsc#1267732
* bsc#1267744
* bsc#1267816
* bsc#1267824
* bsc#1267825
* bsc#1267937
* bsc#1267966
* bsc#1267992
* bsc#1267993
* bsc#1267994
* bsc#1268022
* bsc#1268037
* bsc#1268237
* bsc#1268238
* bsc#1268276
* bsc#1268307
* bsc#1268335
* bsc#1268428
* bsc#1268660
* bsc#1268661
* bsc#1268989
* bsc#1269022
* bsc#1269031
* bsc#1269033
* bsc#1269036
* bsc#1269087
* bsc#1269103
* bsc#1269135
* bsc#1269136
* bsc#1269137
* bsc#1269151
* bsc#1269159
* bsc#1269164
* bsc#1269188
* bsc#1269193
* bsc#1269199
* bsc#1269230
* bsc#1269234
* bsc#1269252
* bsc#1269262
* bsc#1269288
* bsc#1269310
* bsc#1269389
* bsc#1269392
* bsc#1269397
* bsc#1269398
* bsc#1269416
* bsc#1269418
* bsc#1269493
* bsc#1269506
* bsc#1269519
* bsc#1269527
* bsc#1269531
* bsc#1269532
* bsc#1269537
* bsc#1269587
* bsc#1269617
* bsc#1269645
* bsc#1269646
* bsc#1269647
* bsc#1269651
* bsc#1269680
* bsc#1269690
* bsc#1269691
* bsc#1269700
* bsc#1269708
* bsc#1269710
* bsc#1269768
* bsc#1269795
* bsc#1269798
* bsc#1269809
* bsc#1269814
* bsc#1269821
* bsc#1269904
* bsc#1269982
* bsc#1269989
* bsc#1269992
* bsc#1270000
* bsc#1270022
* bsc#1270042
* bsc#1270059
* bsc#1270226
* bsc#1271366

Cross-References:

* CVE-2025-10263
* CVE-2025-39894
* CVE-2025-40341
* CVE-2026-23248
* CVE-2026-23394
* CVE-2026-23451
* CVE-2026-31414
* CVE-2026-31429
* CVE-2026-31438
* CVE-2026-31450
* CVE-2026-31452
* CVE-2026-31466
* CVE-2026-31469
* CVE-2026-31479
* CVE-2026-31492
* CVE-2026-31495
* CVE-2026-31499
* CVE-2026-31502
* CVE-2026-31555
* CVE-2026-31560
* CVE-2026-31580
* CVE-2026-31596
* CVE-2026-31646
* CVE-2026-31647
* CVE-2026-31663
* CVE-2026-31664
* CVE-2026-31665
* CVE-2026-31670
* CVE-2026-31673
* CVE-2026-31674
* CVE-2026-31680
* CVE-2026-31693
* CVE-2026-31743
* CVE-2026-31752
* CVE-2026-31771
* CVE-2026-43010
* CVE-2026-43014
* CVE-2026-43015
* CVE-2026-43016
* CVE-2026-43022
* CVE-2026-43024
* CVE-2026-43028
* CVE-2026-43034
* CVE-2026-43035
* CVE-2026-43036
* CVE-2026-43053
* CVE-2026-43057
* CVE-2026-43074
* CVE-2026-43080
* CVE-2026-43081
* CVE-2026-43083
* CVE-2026-43085
* CVE-2026-43086
* CVE-2026-43089
* CVE-2026-43090
* CVE-2026-43092
* CVE-2026-43093
* CVE-2026-43094
* CVE-2026-43101
* CVE-2026-43107
* CVE-2026-43119
* CVE-2026-43124
* CVE-2026-43128
* CVE-2026-43130
* CVE-2026-43132
* CVE-2026-43139
* CVE-2026-43145
* CVE-2026-43157
* CVE-2026-43158
* CVE-2026-43161
* CVE-2026-43167
* CVE-2026-43171
* CVE-2026-43175
* CVE-2026-43187
* CVE-2026-43191
* CVE-2026-43194
* CVE-2026-43198
* CVE-2026-43199
* CVE-2026-43205
* CVE-2026-43213
* CVE-2026-43226
* CVE-2026-43233
* CVE-2026-43238
* CVE-2026-43240
* CVE-2026-43248
* CVE-2026-43260
* CVE-2026-43283
* CVE-2026-43284
* CVE-2026-43298
* CVE-2026-43303
* CVE-2026-43336
* CVE-2026-43337
* CVE-2026-43339
* CVE-2026-43345
* CVE-2026-43351
* CVE-2026-43373
* CVE-2026-43374
* CVE-2026-43383
* CVE-2026-43384
* CVE-2026-43386
* CVE-2026-43403
* CVE-2026-43405
* CVE-2026-43406
* CVE-2026-43407
* CVE-2026-43415
* CVE-2026-43449
* CVE-2026-43450
* CVE-2026-43452
* CVE-2026-43456
* CVE-2026-43457
* CVE-2026-43458
* CVE-2026-43465
* CVE-2026-43466
* CVE-2026-43468
* CVE-2026-43469
* CVE-2026-43470
* CVE-2026-43471
* CVE-2026-43491
* CVE-2026-43492
* CVE-2026-43502
* CVE-2026-45837
* CVE-2026-45838
* CVE-2026-45840
* CVE-2026-45841
* CVE-2026-45848
* CVE-2026-45857
* CVE-2026-45858
* CVE-2026-45861
* CVE-2026-45862
* CVE-2026-45870
* CVE-2026-45884
* CVE-2026-45888
* CVE-2026-45891
* CVE-2026-45894
* CVE-2026-45899
* CVE-2026-45901
* CVE-2026-45912
* CVE-2026-45920
* CVE-2026-45922
* CVE-2026-45933
* CVE-2026-45940
* CVE-2026-45948
* CVE-2026-45961
* CVE-2026-45964
* CVE-2026-45965
* CVE-2026-45974
* CVE-2026-45983
* CVE-2026-45985
* CVE-2026-45997
* CVE-2026-45999
* CVE-2026-46005
* CVE-2026-46024
* CVE-2026-46037
* CVE-2026-46046
* CVE-2026-46050
* CVE-2026-46051
* CVE-2026-46053
* CVE-2026-46063
* CVE-2026-46065
* CVE-2026-46069
* CVE-2026-46071
* CVE-2026-46076
* CVE-2026-46078
* CVE-2026-46079
* CVE-2026-46091
* CVE-2026-46093
* CVE-2026-46099
* CVE-2026-46101
* CVE-2026-46111
* CVE-2026-46112
* CVE-2026-46116
* CVE-2026-46119
* CVE-2026-46120
* CVE-2026-46124
* CVE-2026-46150
* CVE-2026-46160
* CVE-2026-46161
* CVE-2026-46162
* CVE-2026-46172
* CVE-2026-46173
* CVE-2026-46178
* CVE-2026-46185
* CVE-2026-46214
* CVE-2026-46227
* CVE-2026-46242
* CVE-2026-46244
* CVE-2026-46253
* CVE-2026-46254
* CVE-2026-46259
* CVE-2026-46266
* CVE-2026-46289
* CVE-2026-46291
* CVE-2026-46314
* CVE-2026-46319
* CVE-2026-46320
* CVE-2026-46322
* CVE-2026-46328
* CVE-2026-46331
* CVE-2026-52908
* CVE-2026-52909
* CVE-2026-52919
* CVE-2026-52923
* CVE-2026-52924
* CVE-2026-52933
* CVE-2026-52943
* CVE-2026-52954
* CVE-2026-52955
* CVE-2026-52957
* CVE-2026-52962
* CVE-2026-52975
* CVE-2026-52980
* CVE-2026-52993
* CVE-2026-53015
* CVE-2026-53021
* CVE-2026-53036
* CVE-2026-53039
* CVE-2026-53040
* CVE-2026-53041
* CVE-2026-53049
* CVE-2026-53050
* CVE-2026-53053
* CVE-2026-53060
* CVE-2026-53075
* CVE-2026-53078
* CVE-2026-53081
* CVE-2026-53086
* CVE-2026-53090
* CVE-2026-53103
* CVE-2026-53122
* CVE-2026-53133
* CVE-2026-53139
* CVE-2026-53156
* CVE-2026-53167
* CVE-2026-53168
* CVE-2026-53176
* CVE-2026-53178
* CVE-2026-53194
* CVE-2026-53215
* CVE-2026-53216
* CVE-2026-53217
* CVE-2026-53229
* CVE-2026-53249
* CVE-2026-53258
* CVE-2026-53262
* CVE-2026-53263
* CVE-2026-53266
* CVE-2026-53272
* CVE-2026-53274
* CVE-2026-53281
* CVE-2026-53285
* CVE-2026-53286
* CVE-2026-53287
* CVE-2026-53306
* CVE-2026-53359
* CVE-2026-53362

CVSS scores:

* CVE-2025-39894 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-39894 ( SUSE ): 6 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-40341 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-23248 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-23394 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-23451 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-23451 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31414 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31429 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31429 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31438 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31438 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31452 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31452 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31466 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-31466 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31469 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31469 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31479 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31479 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31492 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31492 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31495 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31499 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31499 ( SUSE ): 6 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31502 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31502 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31560 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31560 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31580 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31596 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31596 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31647 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31647 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31663 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31663 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31665 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31665 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31670 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31670 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31673 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-31673 ( SUSE ): 2 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
* CVE-2026-31674 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31674 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31680 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31680 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31693 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H
* CVE-2026-31693 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-31743 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-31752 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-31771 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-31771 ( SUSE ): 8.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43014 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43015 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43016 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43022 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43024 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43034 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43035 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43036 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43053 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43053 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43057 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43074 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43074 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43081 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43083 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43086 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43090 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43092 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43093 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43094 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43101 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43119 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
* CVE-2026-43119 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43124 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43132 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43139 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43145 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43145 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43157 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43158 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-43158 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43167 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43171 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43175 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43187 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-43187 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43191 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43194 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43198 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-43198 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43199 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43205 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43213 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43226 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43233 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43238 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43240 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43248 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43260 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43284 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-43298 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43298 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43303 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43336 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-43336 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-43337 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43337 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43339 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43345 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43351 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43351 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43373 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43374 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43374 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43383 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43384 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
* CVE-2026-43384 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-43386 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43403 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-43403 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-43405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43406 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43407 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43415 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43415 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43452 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43456 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43458 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43466 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43468 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43469 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43470 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43470 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43491 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43491 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43492 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43492 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-43502 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-43502 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45837 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-45837 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-45838 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-45840 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
* CVE-2026-45840 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
* CVE-2026-45841 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45841 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45848 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45857 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45857 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45858 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-45858 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-45861 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45862 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-45862 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
* CVE-2026-45870 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45870 ( SUSE ): 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45884 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45884 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45888 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-45888 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-45891 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-45891 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45894 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-45894 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45899 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45899 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45901 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45901 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45912 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45920 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45920 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45922 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-45922 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-45933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45940 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45948 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45948 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45961 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-45961 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-45964 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45965 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45965 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45974 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45974 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-45983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45985 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45997 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45999 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46005 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46005 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46024 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46024 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46037 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-46037 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46050 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46051 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46051 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46053 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46063 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46063 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46069 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46071 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-46071 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-46076 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
* CVE-2026-46076 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H
* CVE-2026-46078 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-46079 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46079 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46091 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46091 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46093 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-46099 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46101 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
* CVE-2026-46101 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46111 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46112 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-46112 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46119 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-46120 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-46124 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-46160 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46162 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46172 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46173 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46173 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46178 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46178 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46185 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46214 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46214 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46227 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46227 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46242 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46242 ( SUSE ): 8.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-46244 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46254 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46259 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46266 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46289 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46291 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46314 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-46314 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-46319 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-46320 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46320 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46322 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46322 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46328 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
* CVE-2026-46331 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-52908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52908 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52909 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-52909 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-52919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52923 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-52923 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52924 ( SUSE ): 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
* CVE-2026-52924 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52943 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-52943 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52954 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52957 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52957 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-52962 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-52962 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-52975 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52980 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-52993 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-52993 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53015 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53021 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53036 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53039 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53040 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53041 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
* CVE-2026-53049 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-53050 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53050 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53053 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53075 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
* CVE-2026-53078 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53081 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53086 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53086 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53103 ( SUSE ): 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53103 ( SUSE ): 5.9 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53122 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53122 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53133 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53133 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53139 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53156 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53167 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-53167 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-53168 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53176 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53178 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-53178 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53194 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-53215 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53216 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53216 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53217 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-53217 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-53229 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53249 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-53249 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-53258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53262 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-53262 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53266 ( SUSE ): 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-53266 ( SUSE ): 6.1 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53272 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53272 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53274 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53285 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53286 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53287 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53306 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-53306 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-53359 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-53359 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
* CVE-2026-53362 ( SUSE ): 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-53362 ( SUSE ): 9 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 255 vulnerabilities and has 285 bug fixes can now be installed.

Description:

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

- CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
- CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit
in br_nf_local_in() after confirm (bsc#1262430).
- CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
- CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
- CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
- CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
- CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
- CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
- CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
- CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
- CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
(bsc#1267816).
- CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
- CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
- CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
- CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
- CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
- CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
- CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
- CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
- CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
- CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
- CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
- CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
- CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
- CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
- CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
- CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
- CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
- CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
- CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
- CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
- CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
- CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
- CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to
initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
- CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
- CVE-2026-43053: xfs: factor out xfs_attr3_node_entry_remove (bsc#1264084).
- CVE-2026-43057: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback (bsc#1264056).
- CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
- CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
- CVE-2026-43090: xfrm: fix refcount leak in xfrm_migrate_policy_find (bsc#1264250).
- CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).
- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
- CVE-2026-43094: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).
- CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
- CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
- CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
- CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
- CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
- CVE-2026-43145: remoteproc: imx_rproc: Fix invalid loaded resource table detection (bsc#1265091).
- CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).
- CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
- CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
- CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).
- CVE-2026-43171: EFI/CPER: don't dump the entire memory region (bsc#1264549).
- CVE-2026-43175: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (bsc#1264372).
- CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
- CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).
- CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).
- CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
- CVE-2026-43199: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (bsc#1264556).
- CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).
- CVE-2026-43213: wifi: rtw89: pci: validate sequence number of TX release report (bsc#1264643).
- CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
- CVE-2026-43240: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386).
- CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).
- CVE-2026-43260: bnxt_en: Fix RSS context delete logic (bsc#1264429).
- CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
- CVE-2026-43298: drm/amdgpu: Skip vcn poison irq release on VF (bsc#1264852).
- CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
- CVE-2026-43337: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).
- CVE-2026-43339: ipv6: prevent possible UaF in addrconf_permanent_addr() (bsc#1264763).
- CVE-2026-43345: net: ipa: fix event ring index not programmed for IPA v5.0+ (bsc#1265103).
- CVE-2026-43351: KVM: arm64: gic: Set vgic_model before initing private IRQs (bsc#1265082).
- CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
- CVE-2026-43374: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (bsc#1265084).
- CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
- CVE-2026-43384: net/tcp-ao: Fix MAC comparison to be constant-time (bsc#1265097).
- CVE-2026-43386: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).
- CVE-2026-43403: nsfs: tighten permission checks for ns iteration ioctls (bsc#1265129).
- CVE-2026-43405: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741).
- CVE-2026-43406: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073).
- CVE-2026-43407: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020).
- CVE-2026-43415: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend (bsc#1265123).
- CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
- CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
- CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
- CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
- CVE-2026-43458: serial: caif: hold tty->link reference in ldisc_open and ser_release (bsc#1265005).
- CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).
- CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
- CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978).
- CVE-2026-43469: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143).
- CVE-2026-43470: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128).
- CVE-2026-43471: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() (bsc#1264789).
- CVE-2026-43491: net: qrtr: ns: Limit the maximum server registration per node (bsc#1265628).
- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
- CVE-2026-45837: Require (reasonably) normal mappings for MADV_DOFORK (bsc#1266398).
- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
- CVE-2026-45840: openvswitch: cap upcall PID array size and pre-size vport replies (bsc#1266397).
- CVE-2026-45841: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (bsc#1266390).
- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
- CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
- CVE-2026-45858: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 (bsc#1266773).
- CVE-2026-45861: gfs2: Fix slab-use-after-free in qd_put (bsc#1266754).
- CVE-2026-45862: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705).
- CVE-2026-45870: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704).
- CVE-2026-45884: apparmor: avoid per-cpu hold underflow in aa_get_buffer (bsc#1266718).
- CVE-2026-45888: md/raid1: fix memory leak in raid1_run() (bsc#1266761).
- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
- CVE-2026-45894: iommu/vt-d: Clear Present bit before tearing down PASID entry (bsc#1266895).
- CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
- CVE-2026-45901: netfilter: nf_tables: revert commit_mutex usage in reset path (bsc#1266892).
- CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
- CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
- CVE-2026-45922: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805).
- CVE-2026-45933: bpf: Preserve id of register in sync_linked_regs() (bsc#1266693).
- CVE-2026-45940: net: stmmac: fix oops when split header is enabled (bsc#1266916).
- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
- CVE-2026-45961: gfs2: fix memory leaks in gfs2_fill_super error path (bsc#1266933).
- CVE-2026-45964: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698).
- CVE-2026-45965: apparmor: fix invalid deref of rawdata when export_binary is unset (bsc#1267208).
- CVE-2026-45974: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922).
- CVE-2026-45983: nfsd: never defer requests during idmap lookup (bsc#1266697).
- CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
- CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
- CVE-2026-45999: erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (bsc#1266750).
- CVE-2026-46005: xfs: fix a resource leak in xfs_alloc_buftarg() (bsc#1267431).
- CVE-2026-46024: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (bsc#1267218).
- CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267361).
- CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).
- CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).
- CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).
- CVE-2026-46076: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (bsc#1267365).
- CVE-2026-46078: erofs: fix the out-of-bounds nameoff handling for trailing dirents (bsc#1267505).
- CVE-2026-46079: rbd: fix null-ptr-deref when device_add_disk() fails (bsc#1266452).
- CVE-2026-46091: media: rc: igorplugusb: heed coherency rules (bsc#1267238).
- CVE-2026-46093: mm/vmalloc: take vmap_purge_lock in shrinker (bsc#1267548).
- CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).
- CVE-2026-46101: netfilter: reject zero shift in nft_bitwise (bsc#1266878).
- CVE-2026-46111: Bluetooth: hci_conn: fix potential UAF in create_big_sync (bsc#1267626).
- CVE-2026-46112: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (bsc#1267582).
- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
- CVE-2026-46119: libceph: Fix slab-out-of-bounds access in auth message processing (bsc#1267628).
- CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267640).
- CVE-2026-46124: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).
- CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267387).
- CVE-2026-46160: btrfs: fix missing last_unlink_trans update when removing a directory (bsc#1267624).
- CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (bsc#1266838).
- CVE-2026-46162: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840).
- CVE-2026-46172: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
- CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (bsc#1267493).
- CVE-2026-46185: smb/client: fix out-of-bounds read in symlink_data() (bsc#1266830).
- CVE-2026-46214: vsock/virtio: fix accept queue count leak on transport mismatch (bsc#1267717).
- CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267697).
- CVE-2026-46242: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).
- CVE-2026-46244: netfilter: nft_inner: Fix IPv6 inner_thoff desync (bsc#1267654).
- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
- CVE-2026-46254: AppArmor: Allow apparmor to handle unaligned dfa tables (bsc#1267637).
- CVE-2026-46259: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685).
- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
- CVE-2026-46289: lib/scatterlist: fix length calculations in extract_kvec_to_sg (bsc#1267966).
- CVE-2026-46291: printk: add print_hex_dump_devel() (bsc#1267937).
- CVE-2026-46314: drm/v3d: Reject empty multisync extension to prevent infinite loop (bsc#1267992).
- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
- CVE-2026-46322: tun: free page on build_skb failure in tun_xdp_one() (bsc#1267994).
- CVE-2026-46328: apparmor: fix rlimit for posix cpu timers (bsc#1268037).
- CVE-2026-52908: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible (bsc#1268661).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
- CVE-2026-52919: batman-adv: fix tp_meter counter underflow during shutdown (bsc#1269031).
- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
- CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
- CVE-2026-52954: libceph: handle rbtree insertion error in decode_choose_args() (bsc#1269137).
- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
- CVE-2026-52957: libceph: Fix potential null-ptr-deref in decode_choose_args() (bsc#1269103).
- CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr() (bsc#1269135).
- CVE-2026-52975: bonding: 3ad: implement proper RCU rules for port->aggregator (bsc#1269234).
- CVE-2026-52980: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252).
- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
- CVE-2026-53015: erofs: unify lcn as u64 for 32-bit platforms (bsc#1269087).
- CVE-2026-53021: scsi: target: core: Fix integer overflow in UNMAP bounds check (bsc#1269151).
- CVE-2026-53036: bpf, arm64: Reject out-of-range B.cond targets (bsc#1269389).
- CVE-2026-53039: ocfs2: validate group add input before caching (bsc#1269392).
- CVE-2026-53040: ocfs2: validate bg_bits during freefrag scan (bsc#1269397).
- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
- CVE-2026-53049: gfs2: add some missing log locking (bsc#1269646).
- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
- CVE-2026-53060: dm cache metadata: fix memory leak on metadata abort retry (bsc#1269164).
- CVE-2026-53075: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (bsc#1269690).
- CVE-2026-53078: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops (bsc#1269700).
- CVE-2026-53081: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708).
- CVE-2026-53086: net: bcmgenet: move DESC_INDEX flow to ring 0 (bsc#1269537).
- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).
- CVE-2026-53103: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (bsc#1269416).
- CVE-2026-53122: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit (bsc#1269418).
- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
- CVE-2026-53139: drm/v3d: Skip CSD when it has zeroed workgroups (bsc#1269262).
- CVE-2026-53156: nvmem: core: fix use-after-free bugs in error paths (bsc#1269288).
- CVE-2026-53167: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (bsc#1269768).
- CVE-2026-53168: fuse: reject fuse_notify() pagecache ops on directories (bsc#1269645).
- CVE-2026-53176: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (bsc#1269710).
- CVE-2026-53178: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction (bsc#1269795).
- CVE-2026-53215: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680).
- CVE-2026-53216: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587).
- CVE-2026-53217: net: mvpp2: sync RX data at the hardware packet offset (bsc#1269989).
- CVE-2026-53229: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691).
- CVE-2026-53249: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (bsc#1269992).
- CVE-2026-53258: wifi: fix leak if split 6 GHz scanning fails (bsc#1269230).
- CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).
- CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression (bsc#1269647).
- CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).
- CVE-2026-53272: erofs: fix use-after-free on sbi->sync_decompress (bsc#1269809).
- CVE-2026-53274: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS (bsc#1269651).
- CVE-2026-53281: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (bsc#1269519).
- CVE-2026-53285: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1269527).
- CVE-2026-53286: idpf: fix double free and use-after-free in aux device error paths (bsc#1269531).
- CVE-2026-53287: audit: fix incorrect inheritable capability in CAPSET records (bsc#1269506).
- CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices (bsc#1269814).

The following non security issues were fixed:

- accel/ivpu: Fix signed integer truncation in IPC receive (git-fixes).
- ACPI: CPPC: Suppress UBSAN warning caused by field misuse (git-fixes).
- ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() (git-fixes).
- ACPI: IPMI: Fix message kref handling on dead device (git-fixes).
- ACPI: NFIT: core: Fix possible NULL pointer dereference (git-fixes).
- ACPI: resource: Amend kernel-doc style (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe() (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: firewire: isight: bound the sample count to the packet payload (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: scarlett2: Allow flash writes ending at segment boundary (git-fixes).
- ALSA: scarlett2: Return ENOSPC for out-of-bounds flash writes (stable-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event() (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input (git-fixes).
- ALSA: timer: Fix UAF at snd_timer_user_params() (stable-fixes).
- ALSA: timer: Forcibly close timer instances at closing (git-fixes).
- ALSA: usb-audio: avoid kobject path lookup in DualSense match (git-fixes).
- ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: virtio: Validate control metadata from the device (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (bsc#1267600).
- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (git-fixes).
- ASoC: amd: acp-sdw-sof: Bound DAI link iteration (git-fixes).
- ASoC: codecs: aw88261: fix incorrect masks for boost regs (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() (git-fixes).
- ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup (git-fixes).
- ASoC: mediatek: mt8192: Release reserved memory on cleanup (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value (git-fixes).
- ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use (git-fixes).
- ASoC: wm_adsp: Fix NULL dereference when removing firmware controls (git-fixes).
- Bluetooth: 6lowpan: hold L2CAP conn across debugfs control (git-fixes).
- Bluetooth: bnep: pin L2CAP connection during netdev registration (git-fixes).
- Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() (git-fixes).
- Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD (git-fixes).
- Bluetooth: fix UAF in bt_accept_dequeue() (git-fixes).
- Bluetooth: hci: validate codec capability element length (git-fixes).
- Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device (git-fixes).
- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (git-fixes).
- Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() (git-fixes).
- Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length (git-fixes).
- Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls (git-fixes).
- Bluetooth: ISO: fix malformed ISO_END/CONT handling (git-fixes).
- Bluetooth: ISO: Fix not using bc_sid as advertisement SID (stable-fixes).
- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (stable-fixes).
- Bluetooth: L2CAP: validate option length before reading conf opt value (git-fixes).
- Bluetooth: MGMT: Fix adv monitor add failure cleanup (git-fixes).
- Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete (git-fixes).
- Bluetooth: sco: Fix a race condition in sco_sock_timeout() (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects (git-fixes).
- bnxt_en: Fix NULL pointer dereference (bsc#1268307).
- bpf: Free reuseport cBPF prog after RCU grace period (git-fixes).
- bus: mhi: ep: Add missing state_lock protection for mhi_state access (git-fixes).
- bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() (git-fixes).
- bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path (git-fixes).
- char: tlclk: fix use-after-free in tlclk_cleanup() (git-fixes).
- crypto/hmac: reject keys shorter than 128 bits in fips mode (bsc#1266284 jsc#PED-15986).
- crypto/testmgr: disallow ffdhe2048 in fips mode (bsc#1266284 jsc#PED-15986).
- crypto/testmgr: disallow plain ecb() usage in fips mode (bsc#1266284 jsc#PED-15986).
- crypto/testmgr: disallow sha224 + sha3-224 in fips mode (bsc#1266284 jsc#PED-15986).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (git-fixes).
- crypto: amlogic - avoid double cleanup in meson_crypto_probe() (git-fixes).
- crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (git-fixes).
- crypto: atmel-sha204a - fix blocking and non-blocking rng logic (git-fixes).
- crypto: cavium/cpt - fix DMA cleanup using wrong loop index (git-fixes).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) (git-fixes).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) (git-fixes).
- crypto: ccp - Do not initialize SNP for SEV ioctls (git-fixes).
- crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one (git-fixes).
- crypto: ccp - Treat zero-length cert chain as query for blob lengths (git-fixes).
- crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels (git-fixes).
- crypto: drbg - Fix returning success on failure in CTR_DRBG (git-fixes).
- crypto: drbg - Fix the fips_enabled priority boost (git-fixes).
- crypto: ecc - Fix carry overflow in vli multiplication (git-fixes).
- crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve (git-fixes).
- crypto: hisilicon/qm - disable error report before flr (git-fixes).
- crypto: marvell/octeontx - fix DMA cleanup using wrong loop index (git-fixes).
- crypto: pcrypt - restore callback for non-parallel fallback (git-fixes).
- crypto: qat - protect service table iterations with service_lock (git-fixes).
- crypto: qat - validate RSA CRT component lengths (git-fixes).
- crypto: rng - Free default RNG on module exit (git-fixes).
- crypto: tegra - Fix dma_free_coherent size error (git-fixes).
- crypto: tegra - fix refcount leak in tegra_se_host1x_submit() (git-fixes).
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (git-fixes).
- dm init: ensure device probing has finished in dm-mod.waitfor= (git-fixes).
- dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc (git-fixes).
- dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor (git-fixes).
- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK (git-fixes).
- dmaengine: Fix possible use after free (git-fixes).
- dmaengine: imx-sdma: Refine spba bus searching in probe (git-fixes).
- dmaengine: qcom: gpi: set DMA_PRIVATE capability (git-fixes).
- dmaengine: tegra: Fix burst size calculation (git-fixes).
- driver core: reject devices with unregistered buses (git-fixes).
- driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() (git-fixes).
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (git-fixes).
- drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (stable-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters (git-fixes).
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (stable-fixes).
- drm/amd/pm: fix smu13 power limit default/cap calculation (stable-fixes).
- drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (stable-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro (git-fixes).
- drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (stable-fixes).
- drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() (git-fixes).
- drm/amdgpu: initialize irq.lock spinlock earlier (git-fixes).
- drm/amdgpu: restart the CS if some parts of the VM are still invalidated (stable-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks (git-fixes).
- drm/amdgpu: skip already suspended IP blocks in ip_suspend_phase2 (git-fixes).
- drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free (git-fixes).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path (stable-fixes).
- drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (git-fixes).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (stable-fixes).
- drm/amdkfd: Use exclusive bounds for SVM split alignment checks (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (git-fixes).
- drm/dp: Add eDP 1.5 bit definition (stable-fixes).
- drm/edid: fix OOB read in drm_parse_tiled_block() (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe() (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/i915/gem: Add missing nospec on parallel submit slot (git-fixes).
- drm/i915/gem: Fix phys BO pread/pwrite with offset (git-fixes).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (stable-fixes).
- drm/i915: clear CRTC color blob pointers after dropping refs (git-fixes).
- drm/imagination: Count paired job fence as dependency in prepare_job() (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for Ampere and Ada (git-fixes).
- drm/nouveau: fix reversed error cleanup order in ucopy functions (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch() (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() (git-fixes).
- drm/rockchip: Test for imported buffers with drm_gem_is_imported() (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence() (git-fixes).
- drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/vc4: fix krealloc() memory leak (git-fixes).
- drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (git-fixes).
- drm/virtio: Fix driver removal with disabled KMS (git-fixes).
- drm/xe: fix refcount leak in xe_range_fence_insert() (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay (git-fixes).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (stable-fixes).
- fbdev: fix use-after-free in store_modes() (stable-fixes).
- fbdev: modedb: fix a possible UAF in fb_find_mode() (stable-fixes).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode (git-fixes).
- firmware: arm_scmi: Fix OOB in scmi_power_name_get() (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value (git-fixes).
- firmware_loader: fix device reference leak in firmware_upload_register() (git-fixes).
- firmware_loader: Fix recursive lock in device_cache_fw_images() (git-fixes).
- fpga: dfl: add bounds check in dfh_get_param_size() (git-fixes).
- fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() (git-fixes).
- fpga: region: fix use-after-free in child_regions_with_firmware() (git-fixes).
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (bsc#1267600).
- ftrace: Do not over-allocate ftrace memory (bsc#1267600).
- ftrace: Have ftrace pages output reflect freed pages (bsc#1267600).
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (bsc#1267600).
- ftrace: Update the mcount_loc check of skipped entries (bsc#1267600).
- gpio: mvebu: fix NULL pointer dereference in suspend/resume (git-fixes).
- gpio: mxc: fix irq_high handling (git-fixes).
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled() (git-fixes).
- gpio: virtuser: Fix uninitialized data bug in gpio_virtuser_direction_do_write() (git-fixes).
- gpio: zynq: fix runtime PM leak on remove (git-fixes).
- gpiolib: Extract gpiochip_choose_fwnode() for wider use (stable-fixes).
- gpiolib: Remove redundant assignment of return variable (stable-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check (git-fixes).
- HID: core: Add printk_ratelimited variants to hid_warn() etc (stable-fixes).
- HID: hid-goodix-spi: validate report size to prevent stack buffer overflow (git-fixes).
- HID: letsketch: fix UAF on inrange_timer at driver unbind (git-fixes).
- HID: lg-g15: cancel pending work on remove to fix a use-after-free (git-fixes).
- HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter (git-fixes).
- HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() (git-fixes).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (stable-fixes).
- HID: rate-limit hid_warn to prevent log flooding (stable-fixes).
- HID: remove duplicate hid_warn_ratelimited definition (git-fixes).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (git-fixes).
- HID: wacom: stop hardware after post-start probe failures (git-fixes).
- HID: wiimote: Fix table layout and whitespace errors (git-fixes).
- hv: utils: handle and propagate errors in kvp_register (git-fixes).
- hv: utils: replace deprecated strcpy with strscpy in kvp_register (git-fixes).
- hv_balloon: Simplify data output in hv_balloon_debug_show() (git-fixes).
- hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf (git-fixes).
- hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero (git-fixes).
- hwmon: (asus_atk0110) Check package count before accessing element (git-fixes).
- hwmon: (it87) Clamp negative values to zero in set_fan() (git-fixes).
- hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig (git-fixes).
- hwmon: (max1619) add missing 'select REGMAP' to Kconfig (git-fixes).
- hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig (git-fixes).
- hwmon: (occ) unregister sysfs devices outside occ lock (git-fixes).
- hwmon: adm1275: Prevent reading uninitialized stack (git-fixes).
- hwrng: jh7110 - fix refcount leak in starfive_trng_read() (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data() (git-fixes).
- hyperv: Clean up and fix the guest ID comment in hvgdk.h (git-fixes).
- i2c: core: disable runtime PM on adapter registration failure (git-fixes).
- i2c: core: fix adapter debugfs creation (git-fixes).
- i2c: core: fix adapter deregistration race (git-fixes).
- i2c: core: fix adapter probe deferral loop (git-fixes).
- i2c: core: fix adapter registration race (git-fixes).
- i2c: core: fix hang on adapter registration failure (git-fixes).
- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).
- i2c: core: fix NULL-deref on adapter registration failure (git-fixes).
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (stable-fixes).
- i2c: imx-lpi2c: mark I2C adapter when hardware is powered down (git-fixes).
- i2c: mpc: Fix timeout calculations (git-fixes).
- i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() (git-fixes).
- i2c: riic: fix refcount leak in riic_i2c_resume_noirq() (git-fixes).
- i2c: stm32f7: fix timing computation ignoring i2c-analog-filter (git-fixes).
- i2c: stm32f7: truncate clock period instead of rounding it (git-fixes).
- i2c: tegra: Fix NOIRQ suspend/resume (git-fixes).
- i3c: master: Prevent reuse of dynamic address on device add failure (git-fixes).
- i3c: master: Serialize i3c_set_hotjoin() with the maintenance lock (git-fixes).
- ice: ptp: don't WARN when controlling PF is unavailable (bsc#1267251).
- iio: accel: mma8452: handle I2C read error(s) in mma8452_read() (git-fixes).
- iio: adc: ti-ads1298: add bounds check to pga_settings index (stable-fixes).
- iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling (git-fixes).
- iio: backend: fix uninitialized data in debugfs (git-fixes).
- iio: chemical: scd30: Cleanup initializations and fix sign-extension bug (git-fixes).
- iio: chemical: scd30: fix division by zero in write_raw (git-fixes).
- iio: chemical: scd30: Use guard(mutex) to allow early returns (stable-fixes).
- iio: gyro: bmg160: bail out when bandwidth/filter is not in table (git-fixes).
- iio: gyro: bmg160: wait full startup time after mode change at probe (git-fixes).
- iio: light: opt3001: fix missing state reset on timeout (git-fixes).
- iio: light: si1133: prevent race condition on timeout (git-fixes).
- iio: light: si1133: reset counter to prevent race condition (git-fixes).
- iio: light: veml6030: fix channel type when pushing events (git-fixes).
- iio: light: veml6075: add bounds check to veml6075_it_ms index (stable-fixes).
- iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call (git-fixes).
- iio: resolver: ad2s1210: notify trigger and clear state on fault read error (git-fixes).
- iio: tcs3472: power down chip on probe failure (git-fixes).
- iio: temperature: ltc2983: Fix n_wires default bypassing rotation check (git-fixes).
- iio: temperature: ltc2983: Fix reinit_completion() called after conversion start (git-fixes).
- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) (stable-fixes).
- Input: elan_i2c - validate firmware size before use (stable-fixes).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 (stable-fixes).
- Input: xpad - add "Nova 2 Lite" from GameSir (stable-fixes).
- Input: xpad - add support for ASUS ROG RAIKIRI II (stable-fixes).
- io_uring/cancel: de-unionize file and user_data in struct io_cancel_data (git-fixes bsc#1261250).
- io_uring/filetable: clamp alloc_hint to the configured alloc range (git-fixes bsc#1261250).
- io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic (git-fixes bsc#1261250).
- io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE (git-fixes bsc#1261250).
- io_uring/wait: fix min_timeout behavior (git-fixes bsc#1261250).
- io_uring/waitid: clear waitid info before copying it to userspace (git-fixes).
- io_uring: fix min_wait wakeups for SQPOLL (git-fixes bsc#1261250).
- ipv4: account for fraggap on the paged allocation path (git-fixes).
- ipv6: account for fraggap on the paged allocation path (git-fixes).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (git-fixes).
- KEYS: Use acquire when reading state in keyring search (git-fixes).
- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- KVM: arm64: vgic: Free private_irqs when init fails after allocation (git-fixes).
- KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying (git-fixes).
- KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (git-fixes).
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (git-fixes).
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode (git-fixes).
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state (git-fixes).
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (git-fixes).
- KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 (git-fixes).
- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (git-fixes).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (git-fixes).
- KVM: SEV: Add an anonymous "psc" struct to track current PSC metadata (git-fixes).
- KVM: SEV: Decouple the need to sync the GHCB SA from the need to free the SA (git-fixes).
- KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a registered GHCB (git-fixes).
- KVM: SEV: Make it more obvious when KVM is writing back the current PSC index (git-fixes).
- KVM: SEV: Move sev_free_vcpu() down below sev_es_unmap_ghcb() (git-fixes).
- KVM: SEV: Read start/end indices of PSC requests exactly once per #VMGEXIT (git-fixes).
- KVM: SEV: Return INVALID_EVENT for SNP-only #VMGEXIT from non-SNP guest (git-fixes).
- KVM: SEV: Return INVALID_INPUT, not MISSING_INPUT, for bad GUEST_REQUEST input(s) (git-fixes).
- KVM: SEV: Unmap and unpin the GHCB as needed on vCPU free (git-fixes).
- KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (git-fixes).
- KVM: SVM: check validity of VMCB controls when returning from SMM (git-fixes).
- KVM: SVM: Don't set GIF when clearing EFER.SVME (git-fixes).
- KVM: SVM: Truncate INVLPGA address in compatibility mode (git-fixes).
- KVM: Use vCPU specific memslots in __kvm_vcpu_map() (git-fixes).
- KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode (git-fixes).
- KVM: VMX: Read 32-bit GPR values for ENCLS instructions outside of 64-bit mode (git-fixes).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (git-fixes).
- KVM: x86/mmu: Recursively zap orphaned nested TDP shadow pages on emulated writes (git-fixes).
- KVM: x86/xen: Bug the VM if 32-bit KVM observes a 64-bit mode hypercall (git-fixes).
- KVM: x86/xen: Don't truncate RAX when handling hypercall from protected guest (git-fixes).
- KVM: x86: Consolidate CPUID fault handling for emulator and interception logic (git-fixes).
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (git-fixes).
- KVM: x86: hyper-v: Bound the bank index when querying sparse banks (git-fixes).
- KVM: x86: ioapic: Use old_dest_mode consistently in ioapic_write_indirect() (git-fixes).
- KVM: x86: Move update_cr8_intercept() to lapic.c (git-fixes).
- KVM: x86: Prioritize CPUID faulting over CPUID VM-exits in nested VMX (git-fixes).
- KVM: x86: Trace hypercall register *after* truncating values for 32-bit (git-fixes).
- KVM: x86: Unconditionally recompute CR8 intercept on PPR update (git-fixes).
- mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() (git-fixes).
- mailbox: mtk-adsp: fix UAF during device teardown (git-fixes).
- misc: fastrpc: fix DMA address corruption due to find_vma misuse (git-fixes).
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback (git-fixes).
- misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context (git-fixes).
- misc: fastrpc: fix use-after-free race in fastrpc_map_create (git-fixes).
- mm/vmstat: defer the refresh_zone_stat_thresholds after all CPUs bringup (bsc#1270042).
- mtd: maps: vmu-flash: fix NULL pointer dereference in initialization (git-fixes).
- mtd: rawnand: fix condition in 'nand_select_target()' (git-fixes).
- mtd: rawnand: Pause continuous reads at block boundaries (git-fixes).
- mtd: rawnand: pl353: fix probe resource allocation (git-fixes).
- mtd: slram: remove failed entries from the device list (git-fixes).
- mtd: spi-nor: Drop duplicate Kconfig dependency (git-fixes).
- mtd: spi-nor: macronix: Add post_sfdp fixups for Quad Input Page Program (stable-fixes).
- mtd: spi-nor: macronix: add support for mx66{l2, u1}g45g (stable-fixes).
- mtd: spi-nor: spansion: use die erase for multi-die devices only (git-fixes).
- mtd: spi-nor: swp: Improve locking user experience (git-fixes).
- net: aquantia: Add missing descriptor cache invalidation on ATL2 (bsc#1268428).
- net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (bsc#1261256).
- net: mana: Add ethtool counters for RX CQEs in coalesced type (bsc#1261256).
- net: mana: Add support for PF device 0x00C1 (bsc#1268237).
- net: mana: Add support for RX CQE Coalescing (bsc#1261256).
- net: mana: Allocate interrupt context for each EQ when creating vPort (git-fixes).
- net: mana: Cache MANA_QUERY_LINK_CONFIG result to avoid repeated HWC queries (bsc#1268238).
- net: mana: Create separate EQs for each vPort (git-fixes).
- net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 (git-fixes).
- net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check (git-fixes).
- net: mana: initialize gdma queue id to INVALID_QUEUE_ID (git-fixes).
- net: mana: Introduce GIC context with refcounting for interrupt management (git-fixes).
- net: mana: Optimize irq affinity for low vcpu configs (git-fixes).
- net: mana: Query device capabilities and configure MSI-X sharing for EQs (git-fixes).
- net: mana: Sync page pool RX frags for CPU (git-fixes).
- net: mana: Use GIC functions to allocate global EQs (git-fixes).
- net: mana: Validate the packet length reported by the NIC (git-fixes).
- net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy (git-fixes).
- net: usb: lan78xx: disable VLAN filter in promiscuous mode (git-fixes).
- net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (git-fixes).
- net: wwan: iosm: bound device offsets in the MUX downlink decoder (git-fixes).
- nfc: hci: fix out-of-bounds read in HCP header parsing (git-fixes).
- nfc: llcp: Fix use-after-free in llcp_sock_release() (git-fixes).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (git-fixes).
- packaging: Add nvidia kernel description.
- packaging: compute-PATCHVERSION.sh -> compute-PATCHVERSION.
- page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches (bsc#1261562).
- page_pool: Move pp_magic check into helper functions (bsc#1261562).
- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (bsc#1261562).
- PCI: Update saved_config_space upon resource assignment (git-fixes).
- perf/x86/intel/uncore: Fix die ID init and look up bugs (bsc#1267419).
- perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1267419).
- platform/x86: dell-laptop: fix missing cleanups in init error path (git-fixes).
- platform/x86: intel-hid: Protect ACPI notify handler against recursion (git-fixes).
- platform/x86: xo15-ebook: Fix wakeup source and GPE handling (git-fixes).
- PM: sleep: Use complete() in device_pm_sleep_init() (git-fixes).
- power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() (git-fixes).
- power: supply: charger-manager: fix refcount leak in is_full_charged() (git-fixes).
- power: supply: core: fix supplied_from allocations (git-fixes).
- power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak (git-fixes).
- powerpc/boot: Allow text relocations for pseries wrapper with binutils 2.46+ (git-fixes).
- powerpc/fadump: define MIN_RMA in bytes rather than MB (bsc#1236743 git-fixes).
- ppc/fadump: invoke kmsg_dump in fadump panic path (bsc#1270226 ltc#218302).
- pwm: imx27: Fix variable truncation in .apply() (git-fixes).
- RDMA/mana_ib: Allocate interrupt contexts on EQs (git-fixes).
- RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed (git-fixes).
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() (git-fixes).
- Revert "fs: don't block i_writecount during exec" (bsc#1269982).
- rtc: abx80x: fix the RTC_VL_CLR clearing all status flags (git-fixes).
- rtc: cmos: unregister HPET IRQ handler on probe failure (git-fixes).
- rtc: ds1307: Fix off-by-one issue with wday for rx8130 (git-fixes).
- rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 (git-fixes).
- rtc: mpfs: fix counter upload completion condition (git-fixes).
- rtc: msc313: fix NULL deref in shared IRQ handler at probe (git-fixes).
- scripts/sorttable: Add helper functions for Elf_Ehdr (bsc#1267600).
- scripts/sorttable: Add helper functions for Elf_Shdr (bsc#1267600).
- scripts/sorttable: Add helper functions for Elf_Sym (bsc#1267600).
- scripts/sorttable: Allow matches to functions before function entry (bsc#1267600).
- scripts/sorttable: Always use an array for the mcount_loc sorting (bsc#1267600).
- scripts/sorttable: Convert Elf_Ehdr to union (bsc#1267600).
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (bsc#1267600).
- scripts/sorttable: Fix endianness handling in build-time mcount sort (bsc#1267600).
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (bsc#1267600).
- scripts/sorttable: Have mcount rela sort use direct values (bsc#1267600).
- scripts/sorttable: Have the ORC code use the _r() functions to read (bsc#1267600).
- scripts/sorttable: Make compare_extable() into two functions (bsc#1267600).
- scripts/sorttable: Move code from sorttable.h into sorttable.c (bsc#1267600).
- scripts/sorttable: Remove unneeded Elf_Rel (bsc#1267600).
- scripts/sorttable: Remove unused macro defines (bsc#1267600).
- scripts/sorttable: Remove unused write functions (bsc#1267600).
- scripts/sorttable: Replace Elf_Shdr Macro with a union (bsc#1267600).
- scripts/sorttable: Use a structure of function pointers for elf helpers (bsc#1267600).
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (bsc#1267600).
- scripts/sorttable: Use uint64_t for mcount sorting (bsc#1267600).
- scripts/sorttable: Zero out weak functions in mcount_loc table (bsc#1267600).
- scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() (bsc#1257506).
- scsi: storvsc: Replace symbolic permissions with octal (git-fixes).
- scsi: target: Fix hexadecimal CHAP_I handling (git-fixes).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object set (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests (poo#202224).
- selftests/bpf: Consolidate kernel modules into common directory (poo#202224).
- selftests/bpf: Copy test_kmods when installing selftest (poo#202224).
- selftests/bpf: Fix runqslower cross-endian build (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro kernels (poo#202224).
- selftests/bpf: make BPF_TARGET_ENDIAN non-recursive to speed up *.bpf.o build (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites of .test.d (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions (poo#202224).
- selftests/bpf: Skip tests whose objects were not built (poo#202224).
- selftests/bpf: Support cross-endian building (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures (poo#202224).
- selftests/bpf: Tolerate missing files during install (poo#202224).
- selftests/bpf: Tolerate test file compilation failures (poo#202224).
- serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git-fixes).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq() (git-fixes).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero (git-fixes).
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock (git-fixes).
- slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD (git-fixes).
- slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership (git-fixes).
- slimbus: qcom-ngd-ctrl: fix OF node refcount (git-fixes).
- slimbus: qcom-ngd-ctrl: Fix probe error path ordering (git-fixes).
- slimbus: qcom-ngd-ctrl: Fix up platform_driver registration (git-fixes).
- slimbus: qcom-ngd-ctrl: Initialize controller resources in controller (git-fixes).
- slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd (git-fixes).
- soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() (git-fixes).
- soc: qcom: ice: Return -ENODEV if the ICE platform device is not found (git-fixes).
- spi: at91-usart: drop dead runtime pm support (git-fixes).
- spi: dw: fix wrong BAUDR setting after resume (git-fixes).
- spi: ep93xx: fix double-free of zeropage on DMA setup failure (git-fixes).
- spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() (git-fixes).
- spi: fsl-lpspi: terminate the RX channel on TX prepare failure path (git-fixes).
- spi: hisi-kunpeng: Use dev_err_probe() for host registration failure (git-fixes).
- spi: meson-spifc: fix runtime PM leak on remove (git-fixes).
- spi: rpc-if: Use correct device for hardware reinitialization on resume (git-fixes).
- spi: uniphier: Fix completion initialization order before devm_request_irq() (git-fixes).
- spi: xilinx: use FIFO occupancy register to determine buffer size (git-fixes).
- Split off kABI workaround for bsc#1267458 (bsc#1267458).
- staging: most: video: avoid double free on video register failure (git-fixes).
- staging: nvec: fix use-after-free in nvec_rx_completed() (git-fixes).
- thermal: hwmon: Fix critical temperature attribute removal (git-fixes).
- thermal: intel: Fix dangling resources on thermal_throttle_online() failure (git-fixes).
- thermal: testing: reject missing command arguments (git-fixes).
- thermal: testing: zone: Flush work items during cleanup (git-fixes).
- thunderbolt: Bound root directory content to block size (git-fixes).
- thunderbolt: Clamp XDomain response data copy to allocation size (git-fixes).
- thunderbolt: debugfs: Don't stop reading SB registers if just one fails (git-fixes).
- thunderbolt: debugfs: Fix margining error counter buffer leak (git-fixes).
- thunderbolt: Limit XDomain response copy to actual frame size (git-fixes).
- thunderbolt: Reject zero-length property entries in validator (git-fixes).
- thunderbolt: Validate XDomain request packet size before type cast (git-fixes).
- tools/power/x86/intel-speed-select: Harden daemon pidfile open (git-fixes).
- tpm: fix event_size output in tpm1_binary_bios_measurements_show (git-fixes).
- tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt (git-fixes).
- tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() (git-fixes).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (stable-fixes).
- usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval (stable-fixes).
- usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() (git-fixes).
- usb: host: max3421: Reject hub port requests for non-existent ports (git-fixes).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers (git-fixes).
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (git-fixes).
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (git-fixes).
- USB: serial: kl5kusb105: fix bulk-out buffer overflow (git-fixes).
- USB: serial: option: add usb-id for Dell Wireless DW5826e-m (stable-fixes).
- usb: storage: Add quirks for PNY Elite Portable SSD (git-fixes).
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (stable-fixes).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT (stable-fixes).
- usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (stable-fixes).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (stable-fixes).
- usb: typec: ucsi: ccg: reject firmware images without a ':' record header (stable-fixes).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (stable-fixes).
- usb: typec: ucsi: validate connector number in ucsi_connector_change() (stable-fixes).
- usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() (stable-fixes).
- usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (git-fixes).
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (git-fixes).
- watchdog/hpwdt: Refine hpwdt message for UV platform (bsc#1269199).
- watchdog: apple: Add "apple,t8103-wdt" compatible (git-fixes).
- watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 (git-fixes).
- watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH (git-fixes).
- watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure (git-fixes).
- watchdog: unregister PM notifier on watchdog unregister (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message (git-fixes).
- wifi: iwlwifi: mvm: fix race condition in PTP removal (stable-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx drivers (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag() (git-fixes).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S (stable-fixes).
- wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow (git-fixes).
- wifi: mt76: mt7921: avoid undesired changes of the preset regulatory domain (stable-fixes).
- wifi: mt76: mt7921: fix a potential scan no APs (stable-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow (git-fixes).
- wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links (git-fixes).
- wifi: mt76: mt7925: keep TX BA state in the primary WCID (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite loop (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware response (git-fixes).
- x86/cpu/amd: Correct the microcode table for Zenbleed (git-fixes).
- x86/cpu: Disable FRED when PTI is forced on (git-fixes).
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (git-fixes).
- x86/cpu: Validate CPUID leaf 0x2 EDX output (git-fixes).
- x86/irq: Ensure initial PIR loads are performed exactly once (git-fixes).
- x86/platform/uv: Expose the uv_hub_type() interface (jsc#PED-16390).
- x86/tsc: Disable clocksource watchdog checking on recent and future UV platforms (jsc#PED-16390).
- X.509: Fix validation of ASN.1 certificate header (git-fixes).
- xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1295=1

Package List:

- openSUSE Leap 16.0:

cluster-md-kmp-64kb-6.12.0-160000.36.1
cluster-md-kmp-azure-6.12.0-160000.36.1
cluster-md-kmp-default-6.12.0-160000.36.1
cluster-md-kmp-rt-6.12.0-160000.36.1
dlm-kmp-64kb-6.12.0-160000.36.1
dlm-kmp-azure-6.12.0-160000.36.1
dlm-kmp-default-6.12.0-160000.36.1
dlm-kmp-rt-6.12.0-160000.36.1
dtb-allwinner-6.12.0-160000.36.1
dtb-altera-6.12.0-160000.36.1
dtb-amazon-6.12.0-160000.36.1
dtb-amd-6.12.0-160000.36.1
dtb-amlogic-6.12.0-160000.36.1
dtb-apm-6.12.0-160000.36.1
dtb-apple-6.12.0-160000.36.1
dtb-arm-6.12.0-160000.36.1
dtb-broadcom-6.12.0-160000.36.1
dtb-cavium-6.12.0-160000.36.1
dtb-exynos-6.12.0-160000.36.1
dtb-freescale-6.12.0-160000.36.1
dtb-hisilicon-6.12.0-160000.36.1
dtb-lg-6.12.0-160000.36.1
dtb-marvell-6.12.0-160000.36.1
dtb-mediatek-6.12.0-160000.36.1
dtb-nvidia-6.12.0-160000.36.1
dtb-qcom-6.12.0-160000.36.1
dtb-renesas-6.12.0-160000.36.1
dtb-rockchip-6.12.0-160000.36.1
dtb-socionext-6.12.0-160000.36.1
dtb-sprd-6.12.0-160000.36.1
dtb-xilinx-6.12.0-160000.36.1
gfs2-kmp-64kb-6.12.0-160000.36.1
gfs2-kmp-azure-6.12.0-160000.36.1
gfs2-kmp-default-6.12.0-160000.36.1
gfs2-kmp-rt-6.12.0-160000.36.1
kernel-64kb-6.12.0-160000.36.1
kernel-64kb-devel-6.12.0-160000.36.1
kernel-64kb-extra-6.12.0-160000.36.1
kernel-64kb-optional-6.12.0-160000.36.1
kernel-azure-6.12.0-160000.36.1
kernel-azure-devel-6.12.0-160000.36.1
kernel-azure-extra-6.12.0-160000.36.1
kernel-azure-optional-6.12.0-160000.36.1
kernel-azure-vdso-6.12.0-160000.36.1
kernel-default-6.12.0-160000.36.1
kernel-default-base-6.12.0-160000.36.1.160000.2.17
kernel-default-devel-6.12.0-160000.36.1
kernel-default-extra-6.12.0-160000.36.1
kernel-default-optional-6.12.0-160000.36.1
kernel-default-vdso-6.12.0-160000.36.1
kernel-devel-6.12.0-160000.36.1
kernel-docs-6.12.0-160000.36.1
kernel-docs-html-6.12.0-160000.36.1
kernel-kvmsmall-6.12.0-160000.36.1
kernel-kvmsmall-devel-6.12.0-160000.36.1
kernel-kvmsmall-vdso-6.12.0-160000.36.1
kernel-macros-6.12.0-160000.36.1
kernel-obs-build-6.12.0-160000.36.1
kernel-obs-qa-6.12.0-160000.36.1
kernel-rt-6.12.0-160000.36.1
kernel-rt-devel-6.12.0-160000.36.1
kernel-rt-extra-6.12.0-160000.36.1
kernel-rt-optional-6.12.0-160000.36.1
kernel-rt-vdso-6.12.0-160000.36.1
kernel-source-6.12.0-160000.36.1
kernel-source-vanilla-6.12.0-160000.36.1
kernel-syms-6.12.0-160000.36.1
kernel-zfcpdump-6.12.0-160000.36.1
kselftests-kmp-64kb-6.12.0-160000.36.1
kselftests-kmp-azure-6.12.0-160000.36.1
kselftests-kmp-default-6.12.0-160000.36.1
kselftests-kmp-rt-6.12.0-160000.36.1
ocfs2-kmp-64kb-6.12.0-160000.36.1
ocfs2-kmp-azure-6.12.0-160000.36.1
ocfs2-kmp-default-6.12.0-160000.36.1
ocfs2-kmp-rt-6.12.0-160000.36.1

References:

* https://www.suse.com/security/cve/CVE-2025-10263.html
* https://www.suse.com/security/cve/CVE-2025-39894.html
* https://www.suse.com/security/cve/CVE-2025-40341.html
* https://www.suse.com/security/cve/CVE-2026-23248.html
* https://www.suse.com/security/cve/CVE-2026-23394.html
* https://www.suse.com/security/cve/CVE-2026-23451.html
* https://www.suse.com/security/cve/CVE-2026-31414.html
* https://www.suse.com/security/cve/CVE-2026-31429.html
* https://www.suse.com/security/cve/CVE-2026-31438.html
* https://www.suse.com/security/cve/CVE-2026-31450.html
* https://www.suse.com/security/cve/CVE-2026-31452.html
* https://www.suse.com/security/cve/CVE-2026-31466.html
* https://www.suse.com/security/cve/CVE-2026-31469.html
* https://www.suse.com/security/cve/CVE-2026-31479.html
* https://www.suse.com/security/cve/CVE-2026-31492.html
* https://www.suse.com/security/cve/CVE-2026-31495.html
* https://www.suse.com/security/cve/CVE-2026-31499.html
* https://www.suse.com/security/cve/CVE-2026-31502.html
* https://www.suse.com/security/cve/CVE-2026-31555.html
* https://www.suse.com/security/cve/CVE-2026-31560.html
* https://www.suse.com/security/cve/CVE-2026-31580.html
* https://www.suse.com/security/cve/CVE-2026-31596.html
* https://www.suse.com/security/cve/CVE-2026-31646.html
* https://www.suse.com/security/cve/CVE-2026-31647.html
* https://www.suse.com/security/cve/CVE-2026-31663.html
* https://www.suse.com/security/cve/CVE-2026-31664.html
* https://www.suse.com/security/cve/CVE-2026-31665.html
* https://www.suse.com/security/cve/CVE-2026-31670.html
* https://www.suse.com/security/cve/CVE-2026-31673.html
* https://www.suse.com/security/cve/CVE-2026-31674.html
* https://www.suse.com/security/cve/CVE-2026-31680.html
* https://www.suse.com/security/cve/CVE-2026-31693.html
* https://www.suse.com/security/cve/CVE-2026-31743.html
* https://www.suse.com/security/cve/CVE-2026-31752.html
* https://www.suse.com/security/cve/CVE-2026-31771.html
* https://www.suse.com/security/cve/CVE-2026-43010.html
* https://www.suse.com/security/cve/CVE-2026-43014.html
* https://www.suse.com/security/cve/CVE-2026-43015.html
* https://www.suse.com/security/cve/CVE-2026-43016.html
* https://www.suse.com/security/cve/CVE-2026-43022.html
* https://www.suse.com/security/cve/CVE-2026-43024.html
* https://www.suse.com/security/cve/CVE-2026-43028.html
* https://www.suse.com/security/cve/CVE-2026-43034.html
* https://www.suse.com/security/cve/CVE-2026-43035.html
* https://www.suse.com/security/cve/CVE-2026-43036.html
* https://www.suse.com/security/cve/CVE-2026-43053.html
* https://www.suse.com/security/cve/CVE-2026-43057.html
* https://www.suse.com/security/cve/CVE-2026-43074.html
* https://www.suse.com/security/cve/CVE-2026-43080.html
* https://www.suse.com/security/cve/CVE-2026-43081.html
* https://www.suse.com/security/cve/CVE-2026-43083.html
* https://www.suse.com/security/cve/CVE-2026-43085.html
* https://www.suse.com/security/cve/CVE-2026-43086.html
* https://www.suse.com/security/cve/CVE-2026-43089.html
* https://www.suse.com/security/cve/CVE-2026-43090.html
* https://www.suse.com/security/cve/CVE-2026-43092.html
* https://www.suse.com/security/cve/CVE-2026-43093.html
* https://www.suse.com/security/cve/CVE-2026-43094.html
* https://www.suse.com/security/cve/CVE-2026-43101.html
* https://www.suse.com/security/cve/CVE-2026-43107.html
* https://www.suse.com/security/cve/CVE-2026-43119.html
* https://www.suse.com/security/cve/CVE-2026-43124.html
* https://www.suse.com/security/cve/CVE-2026-43128.html
* https://www.suse.com/security/cve/CVE-2026-43130.html
* https://www.suse.com/security/cve/CVE-2026-43132.html
* https://www.suse.com/security/cve/CVE-2026-43139.html
* https://www.suse.com/security/cve/CVE-2026-43145.html
* https://www.suse.com/security/cve/CVE-2026-43157.html
* https://www.suse.com/security/cve/CVE-2026-43158.html
* https://www.suse.com/security/cve/CVE-2026-43161.html
* https://www.suse.com/security/cve/CVE-2026-43167.html
* https://www.suse.com/security/cve/CVE-2026-43171.html
* https://www.suse.com/security/cve/CVE-2026-43175.html
* https://www.suse.com/security/cve/CVE-2026-43187.html
* https://www.suse.com/security/cve/CVE-2026-43191.html
* https://www.suse.com/security/cve/CVE-2026-43194.html
* https://www.suse.com/security/cve/CVE-2026-43198.html
* https://www.suse.com/security/cve/CVE-2026-43199.html
* https://www.suse.com/security/cve/CVE-2026-43205.html
* https://www.suse.com/security/cve/CVE-2026-43213.html
* https://www.suse.com/security/cve/CVE-2026-43226.html
* https://www.suse.com/security/cve/CVE-2026-43233.html
* https://www.suse.com/security/cve/CVE-2026-43238.html
* https://www.suse.com/security/cve/CVE-2026-43240.html
* https://www.suse.com/security/cve/CVE-2026-43248.html
* https://www.suse.com/security/cve/CVE-2026-43260.html
* https://www.suse.com/security/cve/CVE-2026-43283.html
* https://www.suse.com/security/cve/CVE-2026-43284.html
* https://www.suse.com/security/cve/CVE-2026-43298.html
* https://www.suse.com/security/cve/CVE-2026-43303.html
* https://www.suse.com/security/cve/CVE-2026-43336.html
* https://www.suse.com/security/cve/CVE-2026-43337.html
* https://www.suse.com/security/cve/CVE-2026-43339.html
* https://www.suse.com/security/cve/CVE-2026-43345.html
* https://www.suse.com/security/cve/CVE-2026-43351.html
* https://www.suse.com/security/cve/CVE-2026-43373.html
* https://www.suse.com/security/cve/CVE-2026-43374.html
* https://www.suse.com/security/cve/CVE-2026-43383.html
* https://www.suse.com/security/cve/CVE-2026-43384.html
* https://www.suse.com/security/cve/CVE-2026-43386.html
* https://www.suse.com/security/cve/CVE-2026-43403.html
* https://www.suse.com/security/cve/CVE-2026-43405.html
* https://www.suse.com/security/cve/CVE-2026-43406.html
* https://www.suse.com/security/cve/CVE-2026-43407.html
* https://www.suse.com/security/cve/CVE-2026-43415.html
* https://www.suse.com/security/cve/CVE-2026-43449.html
* https://www.suse.com/security/cve/CVE-2026-43450.html
* https://www.suse.com/security/cve/CVE-2026-43452.html
* https://www.suse.com/security/cve/CVE-2026-43456.html
* https://www.suse.com/security/cve/CVE-2026-43457.html
* https://www.suse.com/security/cve/CVE-2026-43458.html
* https://www.suse.com/security/cve/CVE-2026-43465.html
* https://www.suse.com/security/cve/CVE-2026-43466.html
* https://www.suse.com/security/cve/CVE-2026-43468.html
* https://www.suse.com/security/cve/CVE-2026-43469.html
* https://www.suse.com/security/cve/CVE-2026-43470.html
* https://www.suse.com/security/cve/CVE-2026-43471.html
* https://www.suse.com/security/cve/CVE-2026-43491.html
* https://www.suse.com/security/cve/CVE-2026-43492.html
* https://www.suse.com/security/cve/CVE-2026-43502.html
* https://www.suse.com/security/cve/CVE-2026-45837.html
* https://www.suse.com/security/cve/CVE-2026-45838.html
* https://www.suse.com/security/cve/CVE-2026-45840.html
* https://www.suse.com/security/cve/CVE-2026-45841.html
* https://www.suse.com/security/cve/CVE-2026-45848.html
* https://www.suse.com/security/cve/CVE-2026-45857.html
* https://www.suse.com/security/cve/CVE-2026-45858.html
* https://www.suse.com/security/cve/CVE-2026-45861.html
* https://www.suse.com/security/cve/CVE-2026-45862.html
* https://www.suse.com/security/cve/CVE-2026-45870.html
* https://www.suse.com/security/cve/CVE-2026-45884.html
* https://www.suse.com/security/cve/CVE-2026-45888.html
* https://www.suse.com/security/cve/CVE-2026-45891.html
* https://www.suse.com/security/cve/CVE-2026-45894.html
* https://www.suse.com/security/cve/CVE-2026-45899.html
* https://www.suse.com/security/cve/CVE-2026-45901.html
* https://www.suse.com/security/cve/CVE-2026-45912.html
* https://www.suse.com/security/cve/CVE-2026-45920.html
* https://www.suse.com/security/cve/CVE-2026-45922.html
* https://www.suse.com/security/cve/CVE-2026-45933.html
* https://www.suse.com/security/cve/CVE-2026-45940.html
* https://www.suse.com/security/cve/CVE-2026-45948.html
* https://www.suse.com/security/cve/CVE-2026-45961.html
* https://www.suse.com/security/cve/CVE-2026-45964.html
* https://www.suse.com/security/cve/CVE-2026-45965.html
* https://www.suse.com/security/cve/CVE-2026-45974.html
* https://www.suse.com/security/cve/CVE-2026-45983.html
* https://www.suse.com/security/cve/CVE-2026-45985.html
* https://www.suse.com/security/cve/CVE-2026-45997.html
* https://www.suse.com/security/cve/CVE-2026-45999.html
* https://www.suse.com/security/cve/CVE-2026-46005.html
* https://www.suse.com/security/cve/CVE-2026-46024.html
* https://www.suse.com/security/cve/CVE-2026-46037.html
* https://www.suse.com/security/cve/CVE-2026-46046.html
* https://www.suse.com/security/cve/CVE-2026-46050.html
* https://www.suse.com/security/cve/CVE-2026-46051.html
* https://www.suse.com/security/cve/CVE-2026-46053.html
* https://www.suse.com/security/cve/CVE-2026-46063.html
* https://www.suse.com/security/cve/CVE-2026-46065.html
* https://www.suse.com/security/cve/CVE-2026-46069.html
* https://www.suse.com/security/cve/CVE-2026-46071.html
* https://www.suse.com/security/cve/CVE-2026-46076.html
* https://www.suse.com/security/cve/CVE-2026-46078.html
* https://www.suse.com/security/cve/CVE-2026-46079.html
* https://www.suse.com/security/cve/CVE-2026-46091.html
* https://www.suse.com/security/cve/CVE-2026-46093.html
* https://www.suse.com/security/cve/CVE-2026-46099.html
* https://www.suse.com/security/cve/CVE-2026-46101.html
* https://www.suse.com/security/cve/CVE-2026-46111.html
* https://www.suse.com/security/cve/CVE-2026-46112.html
* https://www.suse.com/security/cve/CVE-2026-46116.html
* https://www.suse.com/security/cve/CVE-2026-46119.html
* https://www.suse.com/security/cve/CVE-2026-46120.html
* https://www.suse.com/security/cve/CVE-2026-46124.html
* https://www.suse.com/security/cve/CVE-2026-46150.html
* https://www.suse.com/security/cve/CVE-2026-46160.html
* https://www.suse.com/security/cve/CVE-2026-46161.html
* https://www.suse.com/security/cve/CVE-2026-46162.html
* https://www.suse.com/security/cve/CVE-2026-46172.html
* https://www.suse.com/security/cve/CVE-2026-46173.html
* https://www.suse.com/security/cve/CVE-2026-46178.html
* https://www.suse.com/security/cve/CVE-2026-46185.html
* https://www.suse.com/security/cve/CVE-2026-46214.html
* https://www.suse.com/security/cve/CVE-2026-46227.html
* https://www.suse.com/security/cve/CVE-2026-46242.html
* https://www.suse.com/security/cve/CVE-2026-46244.html
* https://www.suse.com/security/cve/CVE-2026-46253.html
* https://www.suse.com/security/cve/CVE-2026-46254.html
* https://www.suse.com/security/cve/CVE-2026-46259.html
* https://www.suse.com/security/cve/CVE-2026-46266.html
* https://www.suse.com/security/cve/CVE-2026-46289.html
* https://www.suse.com/security/cve/CVE-2026-46291.html
* https://www.suse.com/security/cve/CVE-2026-46314.html
* https://www.suse.com/security/cve/CVE-2026-46319.html
* https://www.suse.com/security/cve/CVE-2026-46320.html
* https://www.suse.com/security/cve/CVE-2026-46322.html
* https://www.suse.com/security/cve/CVE-2026-46328.html
* https://www.suse.com/security/cve/CVE-2026-46331.html
* https://www.suse.com/security/cve/CVE-2026-52908.html
* https://www.suse.com/security/cve/CVE-2026-52909.html
* https://www.suse.com/security/cve/CVE-2026-52919.html
* https://www.suse.com/security/cve/CVE-2026-52923.html
* https://www.suse.com/security/cve/CVE-2026-52924.html
* https://www.suse.com/security/cve/CVE-2026-52933.html
* https://www.suse.com/security/cve/CVE-2026-52943.html
* https://www.suse.com/security/cve/CVE-2026-52954.html
* https://www.suse.com/security/cve/CVE-2026-52955.html
* https://www.suse.com/security/cve/CVE-2026-52957.html
* https://www.suse.com/security/cve/CVE-2026-52962.html
* https://www.suse.com/security/cve/CVE-2026-52975.html
* https://www.suse.com/security/cve/CVE-2026-52980.html
* https://www.suse.com/security/cve/CVE-2026-52993.html
* https://www.suse.com/security/cve/CVE-2026-53015.html
* https://www.suse.com/security/cve/CVE-2026-53021.html
* https://www.suse.com/security/cve/CVE-2026-53036.html
* https://www.suse.com/security/cve/CVE-2026-53039.html
* https://www.suse.com/security/cve/CVE-2026-53040.html
* https://www.suse.com/security/cve/CVE-2026-53041.html
* https://www.suse.com/security/cve/CVE-2026-53049.html
* https://www.suse.com/security/cve/CVE-2026-53050.html
* https://www.suse.com/security/cve/CVE-2026-53053.html
* https://www.suse.com/security/cve/CVE-2026-53060.html
* https://www.suse.com/security/cve/CVE-2026-53075.html
* https://www.suse.com/security/cve/CVE-2026-53078.html
* https://www.suse.com/security/cve/CVE-2026-53081.html
* https://www.suse.com/security/cve/CVE-2026-53086.html
* https://www.suse.com/security/cve/CVE-2026-53090.html
* https://www.suse.com/security/cve/CVE-2026-53103.html
* https://www.suse.com/security/cve/CVE-2026-53122.html
* https://www.suse.com/security/cve/CVE-2026-53133.html
* https://www.suse.com/security/cve/CVE-2026-53139.html
* https://www.suse.com/security/cve/CVE-2026-53156.html
* https://www.suse.com/security/cve/CVE-2026-53167.html
* https://www.suse.com/security/cve/CVE-2026-53168.html
* https://www.suse.com/security/cve/CVE-2026-53176.html
* https://www.suse.com/security/cve/CVE-2026-53178.html
* https://www.suse.com/security/cve/CVE-2026-53194.html
* https://www.suse.com/security/cve/CVE-2026-53215.html
* https://www.suse.com/security/cve/CVE-2026-53216.html
* https://www.suse.com/security/cve/CVE-2026-53217.html
* https://www.suse.com/security/cve/CVE-2026-53229.html
* https://www.suse.com/security/cve/CVE-2026-53249.html
* https://www.suse.com/security/cve/CVE-2026-53258.html
* https://www.suse.com/security/cve/CVE-2026-53262.html
* https://www.suse.com/security/cve/CVE-2026-53263.html
* https://www.suse.com/security/cve/CVE-2026-53266.html
* https://www.suse.com/security/cve/CVE-2026-53272.html
* https://www.suse.com/security/cve/CVE-2026-53274.html
* https://www.suse.com/security/cve/CVE-2026-53281.html
* https://www.suse.com/security/cve/CVE-2026-53285.html
* https://www.suse.com/security/cve/CVE-2026-53286.html
* https://www.suse.com/security/cve/CVE-2026-53287.html
* https://www.suse.com/security/cve/CVE-2026-53306.html
* https://www.suse.com/security/cve/CVE-2026-53359.html
* https://www.suse.com/security/cve/CVE-2026-53362.html

openSUSE-SU-2026:21387-1: moderate: Security update for libgcrypt

openSUSE security update: security update for libgcrypt
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21387-1
Rating: moderate
References:

* bsc#1262684

Cross-References:

* CVE-2026-41989

CVSS scores:

* CVE-2026-41989 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
* CVE-2026-41989 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has one bug fix can now be installed.

Description:

This update for libgcrypt fixes the following issue

- CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1294=1

Package List:

- openSUSE Leap 16.0:

libgcrypt-devel-1.12.1-160000.3.1
libgcrypt-devel-x86-64-v3-1.12.1-160000.3.1
libgcrypt20-1.12.1-160000.3.1
libgcrypt20-x86-64-v3-1.12.1-160000.3.1

References:

* https://www.suse.com/security/cve/CVE-2026-41989.html

SUSE-SU-2026:3207-1: important: Security update for python-aiohttp

# Security update for python-aiohttp

Announcement ID: SUSE-SU-2026:3207-1
Release Date: 2026-07-23T14:10:51Z
Rating: important
References:

* bsc#1261320
* bsc#1261321
* bsc#1261322
* bsc#1261329
* bsc#1261331
* bsc#1261332
* bsc#1261334
* bsc#1261335
* bsc#1261343
* bsc#1267471
* bsc#1267561
* bsc#1268398
* bsc#1268543
* bsc#1268544
* bsc#1268549
* bsc#1268556
* bsc#1268559
* bsc#1268560
* bsc#1268561

Cross-References:

* CVE-2026-22815
* CVE-2026-34513
* CVE-2026-34514
* CVE-2026-34516
* CVE-2026-34517
* CVE-2026-34518
* CVE-2026-34519
* CVE-2026-34520
* CVE-2026-34525
* CVE-2026-34993
* CVE-2026-47265
* CVE-2026-50269
* CVE-2026-54273
* CVE-2026-54274
* CVE-2026-54275
* CVE-2026-54277
* CVE-2026-54278
* CVE-2026-54279
* CVE-2026-54280

CVSS scores:

* CVE-2026-22815 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-22815 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-22815 ( NVD ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-22815 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-34513 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-34513 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-34513 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34513 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-34514 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
* CVE-2026-34514 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-34514 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34514 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-34516 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-34516 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-34516 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34516 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-34517 ( SUSE ): 2.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-34517 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-34517 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34517 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-34518 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-34518 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-34518 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34518 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-34519 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-34519 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-34519 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34519 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-34520 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-34520 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-34520 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34520 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-34525 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N
* CVE-2026-34525 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
* CVE-2026-34525 ( NVD ): 6.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-34525 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-34993 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-34993 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
* CVE-2026-34993 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L
* CVE-2026-34993 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-47265 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
* CVE-2026-47265 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-47265 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-50269 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-50269 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-50269 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54273 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54273 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54273 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54274 ( SUSE ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
* CVE-2026-54274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54274 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54275 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-54275 ( NVD ): 2.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54275 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54277 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54277 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54277 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54278 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-54278 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54278 ( NVD ): 6.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54278 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54279 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-54279 ( NVD ): 1.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54279 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54280 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-54280 ( NVD ): 1.7
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54280 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Leap 15.4
* Public Cloud Module 15-SP4
* Python 3 Module 15-SP7
* SUSE Linux Enterprise Desktop 15 SP7
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server 15 SP7
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP7
* SUSE Manager Proxy 4.3
* SUSE Manager Retail Branch Server 4.3
* SUSE Manager Server 4.3

An update that solves 19 vulnerabilities can now be installed.

## Description:

This update for python-aiohttp fixes the following issues

* CVE-2026-22815: insufficient restrictions in header/trailer handling can
cause uncapped memory usage and a denial of service (bsc#1261320).
* CVE-2026-34513: unbounded DNS cache can cause a excessive memory usage and
lead to a denial of service (bsc#1261321).
* CVE-2026-34514: `content_type` parameter manipulation can lead to header
injection (bsc#1261322).
* CVE-2026-34516: response with excessive multipart headers can use more
memory than intended and cause a denial of service (bsc#1261329).
* CVE-2026-34517: large multipart form fields read into memory without size
check can cause a denial of service (bsc#1261331).
* CVE-2026-34518: retained `Cookie` and `Proxy-Authorization` headers when
following redirects can lead to information disclosure (bsc#1261332).
* CVE-2026-34519: response `reason` parameter can be use to perform header
injection (bsc#1261334).
* CVE-2026-34520: improper character handling by C parser can lead to header
injection (bsc#1261335).
* CVE-2026-34525: multiple `Host` headers allow for potential security bypass
in proxy servers (bsc#1261343).
* CVE-2026-34993: loading untrusted input in `CookieJar.load()` can lead to
arbitrary code execution (bsc#1267471).
* CVE-2026-47265: cookies set with the `cookies` parameter on requests are
sent after following a cross-origin redirect and can leak sensitive data
(bsc#1267561).
* CVE-2026-50269: improper validation of user-controlled strings allows for
CRLF injection in multipart headers (bsc#1268398).
* CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to
excessive resource consumption (bsc#1268543).
* CVE-2026-54274: incomplete websocket frame payloads can bypass memory use
limits and cause a DoS via excessive resource consumption (bsc#1268544).
* CVE-2026-54275: `server_hostname` TLS SNI check bypass when an existing
connection is reused (bsc#1268549).
* CVE-2026-54277: `max_line_size` bypass when using the optimised C HTTP
parser can lead to excessive resource consumption (bsc#1268556).
* CVE-2026-54278: unread compressed request bodies can bypass
`client_max_size` during cleanup and cause a DoS (bsc#1268559).
* CVE-2026-54279: host-only cookies become domain cookies after `CookieJar`
persistence (bsc#1268560).
* CVE-2026-54280: payload resources are not closed correctly when a client
disconnects in the middle of a write and can cause resource starvation
(bsc#1268561).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3207=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3207=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3207=1

* Python 3 Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-3207=1

* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3207=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3207=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3207=1

* Public Cloud Module 15-SP4
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-3207=1

* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-3207=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3207=1

* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3207=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3207=1

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3207=1

## Package List:

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* python311-aiohttp-3.9.3-150400.10.43.1
* python311-aiohttp-debuginfo-3.9.3-150400.10.43.1
* python-aiohttp-debugsource-3.9.3-150400.10.43.1

## References:

* https://www.suse.com/security/cve/CVE-2026-22815.html
* https://www.suse.com/security/cve/CVE-2026-34513.html
* https://www.suse.com/security/cve/CVE-2026-34514.html
* https://www.suse.com/security/cve/CVE-2026-34516.html
* https://www.suse.com/security/cve/CVE-2026-34517.html
* https://www.suse.com/security/cve/CVE-2026-34518.html
* https://www.suse.com/security/cve/CVE-2026-34519.html
* https://www.suse.com/security/cve/CVE-2026-34520.html
* https://www.suse.com/security/cve/CVE-2026-34525.html
* https://www.suse.com/security/cve/CVE-2026-34993.html
* https://www.suse.com/security/cve/CVE-2026-47265.html
* https://www.suse.com/security/cve/CVE-2026-50269.html
* https://www.suse.com/security/cve/CVE-2026-54273.html
* https://www.suse.com/security/cve/CVE-2026-54274.html
* https://www.suse.com/security/cve/CVE-2026-54275.html
* https://www.suse.com/security/cve/CVE-2026-54277.html
* https://www.suse.com/security/cve/CVE-2026-54278.html
* https://www.suse.com/security/cve/CVE-2026-54279.html
* https://www.suse.com/security/cve/CVE-2026-54280.html
* https://bugzilla.suse.com/show_bug.cgi?id61320
* https://bugzilla.suse.com/show_bug.cgi?id61321
* https://bugzilla.suse.com/show_bug.cgi?id61322
* https://bugzilla.suse.com/show_bug.cgi?id61329
* https://bugzilla.suse.com/show_bug.cgi?id61331
* https://bugzilla.suse.com/show_bug.cgi?id61332
* https://bugzilla.suse.com/show_bug.cgi?id61334
* https://bugzilla.suse.com/show_bug.cgi?id61335
* https://bugzilla.suse.com/show_bug.cgi?id61343
* https://bugzilla.suse.com/show_bug.cgi?id67471
* https://bugzilla.suse.com/show_bug.cgi?id67561
* https://bugzilla.suse.com/show_bug.cgi?id68398
* https://bugzilla.suse.com/show_bug.cgi?id68543
* https://bugzilla.suse.com/show_bug.cgi?id68544
* https://bugzilla.suse.com/show_bug.cgi?id68549
* https://bugzilla.suse.com/show_bug.cgi?id68556
* https://bugzilla.suse.com/show_bug.cgi?id68559
* https://bugzilla.suse.com/show_bug.cgi?id68560
* https://bugzilla.suse.com/show_bug.cgi?id68561

Mozilla Thunderbird 140.13 ESR update for Slackware

Linux Kernel, Rsyslog, PAM, and Apache updates for Ubuntu

Linux Kernel, Firefox ESR, Chromium, and python-aiohttp updates for SUSE

openSUSE-SU-2026:21395-1: important: Security update for trivy

openSUSE-SU-2026:21393-1: moderate: Security update for gawk

openSUSE-SU-2026:21391-1: moderate: Security update for ImageMagick

SUSE-SU-2026:3201-1: low: Security update for GraphicsMagick

SUSE-SU-2026:3199-1: moderate: Security update for multipath-tools

openSUSE-SU-2026:0257-1: important: Security update for chromium

openSUSE-SU-2026:11327-1: moderate: apache-sshd-2.19.0-2.1 on GA media

openSUSE-SU-2026:11331-1: moderate: google-osconfig-agent-20260708.00-2.1 on GA media

openSUSE-SU-2026:11329-1: moderate: firefox-esr-140.13.0-1.1 on GA media

openSUSE-SU-2026:11324-1: moderate: afterburn-5.10.0.git73.b97f772-2.1 on GA media

openSUSE-SU-2026:21385-1: low: Security update for gpg2

openSUSE-SU-2026:21388-1: important: Security update for the Linux Kernel

openSUSE-SU-2026:21387-1: moderate: Security update for libgcrypt

SUSE-SU-2026:3207-1: important: Security update for python-aiohttp

Windows

Linux

macOS

Community