PHP8, OpenSSL, Node.js 22, Wireshark, and Rsyslog updates for SUSE

SUSE 5731 Published by

SUSE have released a batch of critical, important, and moderate security patches covering php8, OpenSSL 1.1, OpenSSL 3, Node.js 22, Wireshark, and Rsyslog across SUSE Linux Enterprise Server 15 SP4 through SP6, openSUSE Leap 15.4 through 16.0, and openSUSE Tumbleweed. The php8 advisory addresses a severe SQL injection flaw in the PostgreSQL extension, while OpenSSL updates mitigate a remote denial-of-service vector targeting TLS ClientHello messages. Additional patches resolve HTTP/2 header manipulation issues and permission model bypasses in Node.js 22, fix stack corruption risks in Rsyslog, and close sixteen distinct protocol dissector crashes in Wireshark.

SUSE-SU-2026:3513-1: critical: Security update for php8
SUSE-SU-2026:3514-1: critical: Security update for php8
openSUSE-SU-2026:21535-1: important: Security update for rsyslog
openSUSE-SU-2026:21534-1: important: Security update for wireshark
openSUSE-SU-2026:21533-1: important: Security update for dnsdist
openSUSE-SU-2026:21532-1: critical: Security update for php8
openSUSE-SU-2026:11445-1: moderate: bouncycastle-1.85-1.1 on GA media
openSUSE-SU-2026:11450-1: moderate: perl-Mojo-JWT-1.20.0-2.1 on GA media
openSUSE-SU-2026:11448-1: moderate: ffmpeg-4-4.4.8-3.1 on GA media
openSUSE-SU-2026:11446-1: moderate: cockpit-repos-4.9-1.1 on GA media
openSUSE-SU-2026:11447-1: moderate: cockpit-subscriptions-16.3-1.1 on GA media
openSUSE-SU-2026:11442-1: moderate: OpenImageIO-3.1.16.0-1.1 on GA media
openSUSE-SU-2026:11444-1: moderate: azure-storage-azcopy-10.32.6-1.1 on GA media
openSUSE-SU-2026:11443-1: moderate: amazon-ecs-init-1.106.0-1.1 on GA media
SUSE-SU-2026:3515-1: important: Security update for openssl-1_1
SUSE-SU-2026:3516-1: important: Security update for openssl-3
SUSE-SU-2026:3518-1: important: Security update for rsyslog
SUSE-SU-2026:3521-1: important: Security update for nodejs22




SUSE-SU-2026:3513-1: critical: Security update for php8


# Security update for php8

Announcement ID: SUSE-SU-2026:3513-1
Release Date: 2026-08-05T18:28:54Z
Rating: critical
References:

* bsc#1273075
* bsc#1273077
* bsc#1273078

Cross-References:

* CVE-2026-17543
* CVE-2026-7260
* CVE-2026-9672

CVSS scores:

* CVE-2026-17543 ( SUSE ): 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-17543 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-17543 ( NVD ): 8.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:X/U:X
* CVE-2026-17543 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7260 ( SUSE ): 6.7
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7260 ( NVD ): 5.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-7260 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-9672 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products:

* openSUSE Leap 15.4
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5

An update that solves three vulnerabilities can now be installed.

## Description:

This update for php8 fixes the following issues:

* CVE-2026-7260: circular symbolic links in phar archives can lead to
unbounded recursion and cause C stack exhaustion (bsc#1273077).
* CVE-2026-9672: security issues in `libgd` (bsc#1273078).
* CVE-2026-17543: improper escaping of backslashes in user-provided parameters
allows for trivial SQL injection in `ext-pgsql` (bsc#1273075).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3513=1

* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3513=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3513=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3513=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3513=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3513=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3513=1

* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-3513=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3513=1

## Package List:

* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* php8-sodium-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-8.0.30-150400.4.73.1
* php8-snmp-8.0.30-150400.4.73.1
* php8-fastcgi-debugsource-8.0.30-150400.4.73.1
* php8-fpm-debugsource-8.0.30-150400.4.73.1
* php8-sqlite-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-debuginfo-8.0.30-150400.4.73.1
* php8-sysvsem-8.0.30-150400.4.73.1
* php8-ldap-debuginfo-8.0.30-150400.4.73.1
* php8-dba-8.0.30-150400.4.73.1
* php8-gmp-debuginfo-8.0.30-150400.4.73.1
* php8-pcntl-8.0.30-150400.4.73.1
* php8-mysql-8.0.30-150400.4.73.1
* php8-ftp-8.0.30-150400.4.73.1
* php8-soap-8.0.30-150400.4.73.1
* php8-pgsql-8.0.30-150400.4.73.1
* php8-xsl-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-debuginfo-8.0.30-150400.4.73.1
* php8-sodium-8.0.30-150400.4.73.1
* php8-enchant-8.0.30-150400.4.73.1
* php8-ctype-debuginfo-8.0.30-150400.4.73.1
* php8-dba-debuginfo-8.0.30-150400.4.73.1
* php8-test-8.0.30-150400.4.73.1
* php8-exif-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debugsource-8.0.30-150400.4.73.1
* php8-mbstring-8.0.30-150400.4.73.1
* php8-pcntl-debuginfo-8.0.30-150400.4.73.1
* php8-bcmath-8.0.30-150400.4.73.1
* php8-sqlite-8.0.30-150400.4.73.1
* php8-8.0.30-150400.4.73.1
* php8-curl-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debuginfo-8.0.30-150400.4.73.1
* php8-readline-8.0.30-150400.4.73.1
* php8-sockets-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-8.0.30-150400.4.73.1
* php8-zip-8.0.30-150400.4.73.1
* php8-iconv-8.0.30-150400.4.73.1
* php8-zip-debuginfo-8.0.30-150400.4.73.1
* php8-iconv-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-8.0.30-150400.4.73.1
* php8-sockets-8.0.30-150400.4.73.1
* php8-ctype-8.0.30-150400.4.73.1
* php8-phar-debuginfo-8.0.30-150400.4.73.1
* php8-dom-debuginfo-8.0.30-150400.4.73.1
* apache2-mod_php8-debugsource-8.0.30-150400.4.73.1
* php8-mysql-debuginfo-8.0.30-150400.4.73.1
* php8-fastcgi-debuginfo-8.0.30-150400.4.73.1
* php8-readline-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-8.0.30-150400.4.73.1
* php8-debuginfo-8.0.30-150400.4.73.1
* php8-sysvmsg-8.0.30-150400.4.73.1
* php8-phar-8.0.30-150400.4.73.1
* php8-xmlwriter-8.0.30-150400.4.73.1
* php8-xmlreader-8.0.30-150400.4.73.1
* php8-dom-8.0.30-150400.4.73.1
* php8-xsl-8.0.30-150400.4.73.1
* php8-opcache-8.0.30-150400.4.73.1
* php8-openssl-8.0.30-150400.4.73.1
* php8-enchant-debuginfo-8.0.30-150400.4.73.1
* php8-fpm-8.0.30-150400.4.73.1
* php8-tokenizer-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-8.0.30-150400.4.73.1
* php8-zlib-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-debuginfo-8.0.30-150400.4.73.1
* php8-mbstring-debuginfo-8.0.30-150400.4.73.1
* php8-sysvshm-debuginfo-8.0.30-150400.4.73.1
* php8-opcache-debuginfo-8.0.30-150400.4.73.1
* php8-bz2-8.0.30-150400.4.73.1
* php8-devel-8.0.30-150400.4.73.1
* php8-debugsource-8.0.30-150400.4.73.1
* php8-cli-debuginfo-8.0.30-150400.4.73.1
* php8-posix-debuginfo-8.0.30-150400.4.73.1
* php8-cli-8.0.30-150400.4.73.1
* php8-tokenizer-8.0.30-150400.4.73.1
* php8-ldap-8.0.30-150400.4.73.1
* php8-xmlwriter-debuginfo-8.0.30-150400.4.73.1
* php8-ftp-debuginfo-8.0.30-150400.4.73.1
* php8-tidy-debuginfo-8.0.30-150400.4.73.1
* php8-curl-8.0.30-150400.4.73.1
* php8-xmlreader-debuginfo-8.0.30-150400.4.73.1
* php8-gettext-8.0.30-150400.4.73.1
* php8-sysvmsg-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-8.0.30-150400.4.73.1
* php8-gmp-8.0.30-150400.4.73.1
* php8-gd-8.0.30-150400.4.73.1
* php8-sysvsem-debuginfo-8.0.30-150400.4.73.1
* php8-intl-debuginfo-8.0.30-150400.4.73.1
* php8-calendar-debuginfo-8.0.30-150400.4.73.1
* php8-odbc-debuginfo-8.0.30-150400.4.73.1
* php8-soap-debuginfo-8.0.30-150400.4.73.1
* php8-posix-8.0.30-150400.4.73.1
* php8-gettext-debuginfo-8.0.30-150400.4.73.1
* php8-fileinfo-debuginfo-8.0.30-150400.4.73.1
* php8-zlib-8.0.30-150400.4.73.1
* php8-bcmath-debuginfo-8.0.30-150400.4.73.1
* php8-embed-debuginfo-8.0.30-150400.4.73.1
* php8-pdo-8.0.30-150400.4.73.1
* php8-intl-8.0.30-150400.4.73.1
* php8-snmp-debuginfo-8.0.30-150400.4.73.1
* php8-pgsql-debuginfo-8.0.30-150400.4.73.1
* php8-openssl-debuginfo-8.0.30-150400.4.73.1
* php8-exif-8.0.30-150400.4.73.1
* php8-gd-debuginfo-8.0.30-150400.4.73.1
* php8-shmop-8.0.30-150400.4.73.1
* php8-odbc-8.0.30-150400.4.73.1
* php8-embed-8.0.30-150400.4.73.1

## References:

* https://www.suse.com/security/cve/CVE-2026-17543.html
* https://www.suse.com/security/cve/CVE-2026-7260.html
* https://www.suse.com/security/cve/CVE-2026-9672.html
* https://bugzilla.suse.com/show_bug.cgi?id73075
* https://bugzilla.suse.com/show_bug.cgi?id73077
* https://bugzilla.suse.com/show_bug.cgi?id73078



SUSE-SU-2026:3514-1: critical: Security update for php8


# Security update for php8

Announcement ID: SUSE-SU-2026:3514-1
Release Date: 2026-08-05T18:29:07Z
Rating: critical
References:

* bsc#1270351
* bsc#1273075
* bsc#1273077
* bsc#1273078

Cross-References:

* CVE-2026-14355
* CVE-2026-17543
* CVE-2026-7260
* CVE-2026-9672

CVSS scores:

* CVE-2026-14355 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
* CVE-2026-14355 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
* CVE-2026-14355 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-14355 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-17543 ( SUSE ): 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-17543 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-17543 ( NVD ): 8.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:X/U:X
* CVE-2026-17543 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-7260 ( SUSE ): 6.7
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7260 ( NVD ): 5.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-7260 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-9672 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that solves four vulnerabilities can now be installed.

## Description:

This update for php8 fixes the following issues:

Update to version 8.2.33.

Security issues fixed:

* CVE-2026-7260: circular symbolic links in phar archives can lead to
unbounded recursion and cause C stack exhaustion (bsc#1273077).
* CVE-2026-9672: security issues in `libgd` (bsc#1273078).
* CVE-2026-17543: improper escaping of backslashes in user-provided parameters
allows for trivial SQL injection in `ext-pgsql` (bsc#1273075).
* CVE-2026-14355: buffer allocation flaw in the AES-WRAP-PAD algorithm
implementation can lead to heap metadata corruption and an application abort
(bsc#1270351).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3514=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3514=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3514=1

## Package List:

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* php8-tidy-8.2.33-150600.3.33.1
* php8-zip-8.2.33-150600.3.33.1
* php8-bz2-8.2.33-150600.3.33.1
* php8-openssl-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-8.2.33-150600.3.33.1
* php8-phar-8.2.33-150600.3.33.1
* php8-xmlreader-8.2.33-150600.3.33.1
* php8-sqlite-debuginfo-8.2.33-150600.3.33.1
* php8-readline-8.2.33-150600.3.33.1
* php8-sockets-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-8.2.33-150600.3.33.1
* php8-fastcgi-debuginfo-8.2.33-150600.3.33.1
* php8-curl-debuginfo-8.2.33-150600.3.33.1
* php8-mbstring-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-8.2.33-150600.3.33.1
* php8-sysvsem-8.2.33-150600.3.33.1
* php8-zip-debuginfo-8.2.33-150600.3.33.1
* php8-ffi-debuginfo-8.2.33-150600.3.33.1
* php8-gmp-8.2.33-150600.3.33.1
* php8-xmlwriter-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-8.2.33-150600.3.33.1
* php8-calendar-debuginfo-8.2.33-150600.3.33.1
* php8-enchant-8.2.33-150600.3.33.1
* php8-ftp-debuginfo-8.2.33-150600.3.33.1
* php8-embed-8.2.33-150600.3.33.1
* php8-pdo-debuginfo-8.2.33-150600.3.33.1
* php8-gmp-debuginfo-8.2.33-150600.3.33.1
* php8-dom-8.2.33-150600.3.33.1
* php8-posix-8.2.33-150600.3.33.1
* php8-debuginfo-8.2.33-150600.3.33.1
* php8-sysvshm-8.2.33-150600.3.33.1
* php8-phar-debuginfo-8.2.33-150600.3.33.1
* php8-sockets-8.2.33-150600.3.33.1
* apache2-mod_php8-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-debuginfo-8.2.33-150600.3.33.1
* php8-xmlreader-debuginfo-8.2.33-150600.3.33.1
* php8-fileinfo-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-8.2.33-150600.3.33.1
* php8-ctype-debuginfo-8.2.33-150600.3.33.1
* php8-ftp-8.2.33-150600.3.33.1
* php8-mysql-debuginfo-8.2.33-150600.3.33.1
* php8-iconv-8.2.33-150600.3.33.1
* php8-intl-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-8.2.33-150600.3.33.1
* php8-xsl-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-debugsource-8.2.33-150600.3.33.1
* php8-exif-debuginfo-8.2.33-150600.3.33.1
* php8-soap-debuginfo-8.2.33-150600.3.33.1
* php8-posix-debuginfo-8.2.33-150600.3.33.1
* php8-gd-debuginfo-8.2.33-150600.3.33.1
* php8-bz2-debuginfo-8.2.33-150600.3.33.1
* php8-dba-debuginfo-8.2.33-150600.3.33.1
* php8-pgsql-8.2.33-150600.3.33.1
* php8-ldap-8.2.33-150600.3.33.1
* php8-mysql-8.2.33-150600.3.33.1
* php8-mbstring-8.2.33-150600.3.33.1
* php8-gettext-8.2.33-150600.3.33.1
* php8-iconv-debuginfo-8.2.33-150600.3.33.1
* php8-tidy-debuginfo-8.2.33-150600.3.33.1
* php8-curl-8.2.33-150600.3.33.1
* php8-fileinfo-8.2.33-150600.3.33.1
* php8-sysvshm-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debugsource-8.2.33-150600.3.33.1
* php8-test-8.2.33-150600.3.33.1
* php8-devel-8.2.33-150600.3.33.1
* php8-embed-debuginfo-8.2.33-150600.3.33.1
* php8-cli-8.2.33-150600.3.33.1
* php8-debugsource-8.2.33-150600.3.33.1
* php8-xmlwriter-8.2.33-150600.3.33.1
* php8-fastcgi-debugsource-8.2.33-150600.3.33.1
* php8-pcntl-debuginfo-8.2.33-150600.3.33.1
* php8-gd-8.2.33-150600.3.33.1
* php8-sysvsem-debuginfo-8.2.33-150600.3.33.1
* php8-sqlite-8.2.33-150600.3.33.1
* php8-pdo-8.2.33-150600.3.33.1
* php8-intl-8.2.33-150600.3.33.1
* php8-snmp-8.2.33-150600.3.33.1
* php8-8.2.33-150600.3.33.1
* php8-ldap-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-8.2.33-150600.3.33.1
* php8-readline-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-debuginfo-8.2.33-150600.3.33.1
* php8-embed-debugsource-8.2.33-150600.3.33.1
* php8-zlib-8.2.33-150600.3.33.1
* php8-dba-8.2.33-150600.3.33.1
* php8-fastcgi-8.2.33-150600.3.33.1
* php8-calendar-8.2.33-150600.3.33.1
* php8-zlib-debuginfo-8.2.33-150600.3.33.1
* php8-dom-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-8.2.33-150600.3.33.1
* php8-soap-8.2.33-150600.3.33.1
* php8-exif-8.2.33-150600.3.33.1
* php8-ctype-8.2.33-150600.3.33.1
* php8-xsl-8.2.33-150600.3.33.1
* php8-gettext-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-8.2.33-150600.3.33.1
* php8-cli-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-debuginfo-8.2.33-150600.3.33.1
* php8-pcntl-8.2.33-150600.3.33.1
* php8-enchant-debuginfo-8.2.33-150600.3.33.1
* php8-snmp-debuginfo-8.2.33-150600.3.33.1
* php8-openssl-8.2.33-150600.3.33.1
* php8-pgsql-debuginfo-8.2.33-150600.3.33.1
* php8-ffi-8.2.33-150600.3.33.1
* openSUSE Leap 15.6 (noarch)
* php8-fpm-apache-8.2.33-150600.3.33.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* php8-tidy-8.2.33-150600.3.33.1
* php8-zip-8.2.33-150600.3.33.1
* php8-bz2-8.2.33-150600.3.33.1
* php8-openssl-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-8.2.33-150600.3.33.1
* php8-xmlreader-8.2.33-150600.3.33.1
* php8-phar-8.2.33-150600.3.33.1
* php8-sqlite-debuginfo-8.2.33-150600.3.33.1
* php8-readline-8.2.33-150600.3.33.1
* php8-sockets-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-8.2.33-150600.3.33.1
* php8-fastcgi-debuginfo-8.2.33-150600.3.33.1
* php8-curl-debuginfo-8.2.33-150600.3.33.1
* php8-mbstring-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-8.2.33-150600.3.33.1
* php8-sysvsem-8.2.33-150600.3.33.1
* php8-zip-debuginfo-8.2.33-150600.3.33.1
* php8-gmp-8.2.33-150600.3.33.1
* php8-xmlwriter-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-debuginfo-8.2.33-150600.3.33.1
* php8-ftp-debuginfo-8.2.33-150600.3.33.1
* php8-gmp-debuginfo-8.2.33-150600.3.33.1
* php8-enchant-8.2.33-150600.3.33.1
* php8-embed-8.2.33-150600.3.33.1
* php8-calendar-debuginfo-8.2.33-150600.3.33.1
* php8-pdo-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-8.2.33-150600.3.33.1
* php8-dom-8.2.33-150600.3.33.1
* php8-posix-8.2.33-150600.3.33.1
* php8-debuginfo-8.2.33-150600.3.33.1
* php8-sysvshm-8.2.33-150600.3.33.1
* php8-phar-debuginfo-8.2.33-150600.3.33.1
* php8-sockets-8.2.33-150600.3.33.1
* apache2-mod_php8-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-debuginfo-8.2.33-150600.3.33.1
* php8-xmlreader-debuginfo-8.2.33-150600.3.33.1
* php8-fileinfo-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-8.2.33-150600.3.33.1
* php8-ctype-debuginfo-8.2.33-150600.3.33.1
* php8-ftp-8.2.33-150600.3.33.1
* php8-mysql-debuginfo-8.2.33-150600.3.33.1
* php8-iconv-8.2.33-150600.3.33.1
* php8-fpm-8.2.33-150600.3.33.1
* php8-intl-debuginfo-8.2.33-150600.3.33.1
* php8-xsl-debuginfo-8.2.33-150600.3.33.1
* php8-exif-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-debugsource-8.2.33-150600.3.33.1
* php8-soap-debuginfo-8.2.33-150600.3.33.1
* php8-posix-debuginfo-8.2.33-150600.3.33.1
* php8-gd-debuginfo-8.2.33-150600.3.33.1
* php8-bz2-debuginfo-8.2.33-150600.3.33.1
* php8-dba-debuginfo-8.2.33-150600.3.33.1
* php8-pgsql-8.2.33-150600.3.33.1
* php8-ldap-8.2.33-150600.3.33.1
* php8-mysql-8.2.33-150600.3.33.1
* php8-mbstring-8.2.33-150600.3.33.1
* php8-gettext-8.2.33-150600.3.33.1
* php8-iconv-debuginfo-8.2.33-150600.3.33.1
* php8-tidy-debuginfo-8.2.33-150600.3.33.1
* php8-curl-8.2.33-150600.3.33.1
* php8-fileinfo-8.2.33-150600.3.33.1
* php8-sysvshm-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debugsource-8.2.33-150600.3.33.1
* php8-test-8.2.33-150600.3.33.1
* php8-devel-8.2.33-150600.3.33.1
* php8-embed-debuginfo-8.2.33-150600.3.33.1
* php8-cli-8.2.33-150600.3.33.1
* php8-debugsource-8.2.33-150600.3.33.1
* php8-xmlwriter-8.2.33-150600.3.33.1
* php8-fastcgi-debugsource-8.2.33-150600.3.33.1
* php8-pcntl-debuginfo-8.2.33-150600.3.33.1
* php8-gd-8.2.33-150600.3.33.1
* php8-sysvsem-debuginfo-8.2.33-150600.3.33.1
* php8-sqlite-8.2.33-150600.3.33.1
* php8-pdo-8.2.33-150600.3.33.1
* php8-snmp-8.2.33-150600.3.33.1
* php8-intl-8.2.33-150600.3.33.1
* php8-8.2.33-150600.3.33.1
* php8-ldap-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-8.2.33-150600.3.33.1
* php8-readline-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-debuginfo-8.2.33-150600.3.33.1
* php8-embed-debugsource-8.2.33-150600.3.33.1
* php8-zlib-8.2.33-150600.3.33.1
* php8-dba-8.2.33-150600.3.33.1
* php8-fastcgi-8.2.33-150600.3.33.1
* php8-zlib-debuginfo-8.2.33-150600.3.33.1
* php8-calendar-8.2.33-150600.3.33.1
* php8-dom-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-8.2.33-150600.3.33.1
* php8-soap-8.2.33-150600.3.33.1
* php8-exif-8.2.33-150600.3.33.1
* php8-ctype-8.2.33-150600.3.33.1
* php8-xsl-8.2.33-150600.3.33.1
* php8-gettext-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-8.2.33-150600.3.33.1
* php8-cli-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-debuginfo-8.2.33-150600.3.33.1
* php8-pcntl-8.2.33-150600.3.33.1
* php8-enchant-debuginfo-8.2.33-150600.3.33.1
* php8-snmp-debuginfo-8.2.33-150600.3.33.1
* php8-openssl-8.2.33-150600.3.33.1
* php8-pgsql-debuginfo-8.2.33-150600.3.33.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* php8-tidy-8.2.33-150600.3.33.1
* php8-zip-8.2.33-150600.3.33.1
* php8-bz2-8.2.33-150600.3.33.1
* php8-openssl-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-8.2.33-150600.3.33.1
* php8-phar-8.2.33-150600.3.33.1
* php8-xmlreader-8.2.33-150600.3.33.1
* php8-sqlite-debuginfo-8.2.33-150600.3.33.1
* php8-readline-8.2.33-150600.3.33.1
* php8-sockets-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-8.2.33-150600.3.33.1
* php8-fastcgi-debuginfo-8.2.33-150600.3.33.1
* php8-curl-debuginfo-8.2.33-150600.3.33.1
* php8-mbstring-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-8.2.33-150600.3.33.1
* php8-sysvsem-8.2.33-150600.3.33.1
* php8-zip-debuginfo-8.2.33-150600.3.33.1
* php8-gmp-8.2.33-150600.3.33.1
* php8-xmlwriter-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-debuginfo-8.2.33-150600.3.33.1
* php8-ftp-debuginfo-8.2.33-150600.3.33.1
* php8-calendar-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-8.2.33-150600.3.33.1
* php8-gmp-debuginfo-8.2.33-150600.3.33.1
* php8-embed-8.2.33-150600.3.33.1
* php8-pdo-debuginfo-8.2.33-150600.3.33.1
* php8-enchant-8.2.33-150600.3.33.1
* php8-dom-8.2.33-150600.3.33.1
* php8-posix-8.2.33-150600.3.33.1
* php8-debuginfo-8.2.33-150600.3.33.1
* php8-sysvshm-8.2.33-150600.3.33.1
* php8-phar-debuginfo-8.2.33-150600.3.33.1
* php8-sockets-8.2.33-150600.3.33.1
* apache2-mod_php8-debuginfo-8.2.33-150600.3.33.1
* php8-tokenizer-debuginfo-8.2.33-150600.3.33.1
* php8-bcmath-debuginfo-8.2.33-150600.3.33.1
* php8-xmlreader-debuginfo-8.2.33-150600.3.33.1
* php8-fileinfo-debuginfo-8.2.33-150600.3.33.1
* php8-sysvmsg-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-8.2.33-150600.3.33.1
* php8-ctype-debuginfo-8.2.33-150600.3.33.1
* php8-ftp-8.2.33-150600.3.33.1
* php8-mysql-debuginfo-8.2.33-150600.3.33.1
* php8-iconv-8.2.33-150600.3.33.1
* php8-intl-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-8.2.33-150600.3.33.1
* php8-xsl-debuginfo-8.2.33-150600.3.33.1
* php8-exif-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-debugsource-8.2.33-150600.3.33.1
* php8-soap-debuginfo-8.2.33-150600.3.33.1
* php8-posix-debuginfo-8.2.33-150600.3.33.1
* php8-gd-debuginfo-8.2.33-150600.3.33.1
* php8-bz2-debuginfo-8.2.33-150600.3.33.1
* php8-dba-debuginfo-8.2.33-150600.3.33.1
* php8-pgsql-8.2.33-150600.3.33.1
* php8-ldap-8.2.33-150600.3.33.1
* php8-mysql-8.2.33-150600.3.33.1
* php8-mbstring-8.2.33-150600.3.33.1
* php8-gettext-8.2.33-150600.3.33.1
* php8-iconv-debuginfo-8.2.33-150600.3.33.1
* php8-tidy-debuginfo-8.2.33-150600.3.33.1
* php8-curl-8.2.33-150600.3.33.1
* php8-fileinfo-8.2.33-150600.3.33.1
* php8-sysvshm-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debugsource-8.2.33-150600.3.33.1
* php8-test-8.2.33-150600.3.33.1
* php8-devel-8.2.33-150600.3.33.1
* php8-embed-debuginfo-8.2.33-150600.3.33.1
* php8-cli-8.2.33-150600.3.33.1
* php8-debugsource-8.2.33-150600.3.33.1
* php8-xmlwriter-8.2.33-150600.3.33.1
* php8-fastcgi-debugsource-8.2.33-150600.3.33.1
* php8-pcntl-debuginfo-8.2.33-150600.3.33.1
* php8-gd-8.2.33-150600.3.33.1
* php8-sqlite-8.2.33-150600.3.33.1
* php8-sysvsem-debuginfo-8.2.33-150600.3.33.1
* php8-intl-8.2.33-150600.3.33.1
* php8-snmp-8.2.33-150600.3.33.1
* php8-pdo-8.2.33-150600.3.33.1
* php8-8.2.33-150600.3.33.1
* php8-ldap-debuginfo-8.2.33-150600.3.33.1
* php8-opcache-8.2.33-150600.3.33.1
* php8-readline-debuginfo-8.2.33-150600.3.33.1
* php8-fpm-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-debuginfo-8.2.33-150600.3.33.1
* php8-embed-debugsource-8.2.33-150600.3.33.1
* php8-zlib-8.2.33-150600.3.33.1
* php8-dba-8.2.33-150600.3.33.1
* php8-fastcgi-8.2.33-150600.3.33.1
* php8-zlib-debuginfo-8.2.33-150600.3.33.1
* php8-calendar-8.2.33-150600.3.33.1
* php8-dom-debuginfo-8.2.33-150600.3.33.1
* php8-shmop-debuginfo-8.2.33-150600.3.33.1
* apache2-mod_php8-8.2.33-150600.3.33.1
* php8-soap-8.2.33-150600.3.33.1
* php8-exif-8.2.33-150600.3.33.1
* php8-ctype-8.2.33-150600.3.33.1
* php8-xsl-8.2.33-150600.3.33.1
* php8-gettext-debuginfo-8.2.33-150600.3.33.1
* php8-odbc-8.2.33-150600.3.33.1
* php8-cli-debuginfo-8.2.33-150600.3.33.1
* php8-sodium-debuginfo-8.2.33-150600.3.33.1
* php8-pcntl-8.2.33-150600.3.33.1
* php8-enchant-debuginfo-8.2.33-150600.3.33.1
* php8-snmp-debuginfo-8.2.33-150600.3.33.1
* php8-openssl-8.2.33-150600.3.33.1
* php8-pgsql-debuginfo-8.2.33-150600.3.33.1

## References:

* https://www.suse.com/security/cve/CVE-2026-14355.html
* https://www.suse.com/security/cve/CVE-2026-17543.html
* https://www.suse.com/security/cve/CVE-2026-7260.html
* https://www.suse.com/security/cve/CVE-2026-9672.html
* https://bugzilla.suse.com/show_bug.cgi?id70351
* https://bugzilla.suse.com/show_bug.cgi?id73075
* https://bugzilla.suse.com/show_bug.cgi?id73077
* https://bugzilla.suse.com/show_bug.cgi?id73078



openSUSE-SU-2026:21535-1: important: Security update for rsyslog


openSUSE security update: security update for rsyslog
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21535-1
Rating: important
References:

* bsc#1264721
* bsc#1271910
* bsc#1272414

Cross-References:

* CVE-2026-61548

CVSS scores:

* CVE-2026-61548 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has 3 bug fixes can now be installed.

Description:

This update for rsyslog fixes the following issues:

- CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414).
- input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).

Changes for rsyslog:

- added a devel subpackage, with requires (bsc#1264721)

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1434=1

Package List:

- openSUSE Leap 16.0:

rsyslog-8.2502.0-160000.4.1
rsyslog-devel-8.2502.0-160000.4.1
rsyslog-diag-tools-8.2502.0-160000.4.1
rsyslog-doc-8.2502.0-160000.4.1
rsyslog-module-elasticsearch-8.2502.0-160000.4.1
rsyslog-module-gcrypt-8.2502.0-160000.4.1
rsyslog-module-gssapi-8.2502.0-160000.4.1
rsyslog-module-gtls-8.2502.0-160000.4.1
rsyslog-module-mmnormalize-8.2502.0-160000.4.1
rsyslog-module-mysql-8.2502.0-160000.4.1
rsyslog-module-omhttpfs-8.2502.0-160000.4.1
rsyslog-module-omtcl-8.2502.0-160000.4.1
rsyslog-module-ossl-8.2502.0-160000.4.1
rsyslog-module-pgsql-8.2502.0-160000.4.1
rsyslog-module-relp-8.2502.0-160000.4.1

References:

* https://www.suse.com/security/cve/CVE-2026-61548.html



openSUSE-SU-2026:21534-1: important: Security update for wireshark


openSUSE security update: security update for wireshark
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21534-1
Rating: important
References:

* bsc#1263727
* bsc#1263758
* bsc#1263759
* bsc#1263760
* bsc#1263761
* bsc#1266670
* bsc#1271133
* bsc#1271134
* bsc#1271136
* bsc#1271137
* bsc#1271138
* bsc#1271139
* bsc#1271140
* bsc#1271141
* bsc#1271142
* bsc#1271144

Cross-References:

* CVE-2026-15163
* CVE-2026-15164
* CVE-2026-15166
* CVE-2026-15167
* CVE-2026-15168
* CVE-2026-15169
* CVE-2026-15170
* CVE-2026-15171
* CVE-2026-15172
* CVE-2026-15174
* CVE-2026-6867
* CVE-2026-7375
* CVE-2026-7376
* CVE-2026-7378
* CVE-2026-7379
* CVE-2026-9759

CVSS scores:

* CVE-2026-15163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15167 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-15168 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
* CVE-2026-15169 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15170 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15171 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15172 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-15174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-6867 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7375 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7378 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-9759 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 16 vulnerabilities and has 16 bug fixes can now be installed.

Description:

This update for wireshark fixes the following issues:

Update to version 4.4.17.

- CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727).
- CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761).
- CVE-2026-7376: Sharkd utility crash (bsc#1263760).
- CVE-2026-7378: Sharkd utility crash (bsc#1263759).
- CVE-2026-7379: Sharkd utility memory leak (bsc#1263758).
- CVE-2026-9759: ROHC protocol dissector crash (bsc#1266670).
- CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133).
- CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134).
- CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash (bsc#1271136).
- CVE-2026-15167: Denial of Service via DBS Etherwatch file parser crash (bsc#1271137).
- CVE-2026-15168: BLF file parser allows possible information disclosure (bsc#1271138).
- CVE-2026-15169: Denial of Service via UMTS FP protocol dissector crash (bsc#1271139).
- CVE-2026-15170: Denial of service via Z39.50 protocol dissector crash (bsc#1271140).
- CVE-2026-15171: Denial of service via SSH protocol dissector crash (bsc#1271141).
- CVE-2026-15172: Denial of service via FMP/NOTIFY protocol dissector crash (bsc#1271142).
- CVE-2026-15174: Denial of Service via Catapult DCT2000 protocol dissector crash (bsc#1271144).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1433=1

Package List:

- openSUSE Leap 16.0:

libwireshark18-4.4.17-160000.1.1
libwiretap15-4.4.17-160000.1.1
libwsutil16-4.4.17-160000.1.1
wireshark-4.4.17-160000.1.1
wireshark-devel-4.4.17-160000.1.1
wireshark-ui-qt-4.4.17-160000.1.1

References:

* https://www.suse.com/security/cve/CVE-2026-15163.html
* https://www.suse.com/security/cve/CVE-2026-15164.html
* https://www.suse.com/security/cve/CVE-2026-15166.html
* https://www.suse.com/security/cve/CVE-2026-15167.html
* https://www.suse.com/security/cve/CVE-2026-15168.html
* https://www.suse.com/security/cve/CVE-2026-15169.html
* https://www.suse.com/security/cve/CVE-2026-15170.html
* https://www.suse.com/security/cve/CVE-2026-15171.html
* https://www.suse.com/security/cve/CVE-2026-15172.html
* https://www.suse.com/security/cve/CVE-2026-15174.html
* https://www.suse.com/security/cve/CVE-2026-6867.html
* https://www.suse.com/security/cve/CVE-2026-7375.html
* https://www.suse.com/security/cve/CVE-2026-7376.html
* https://www.suse.com/security/cve/CVE-2026-7378.html
* https://www.suse.com/security/cve/CVE-2026-7379.html
* https://www.suse.com/security/cve/CVE-2026-9759.html



openSUSE-SU-2026:21533-1: important: Security update for dnsdist


openSUSE security update: security update for dnsdist
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21533-1
Rating: important
References:

* bsc#1269201
* bsc#1269202
* bsc#1269203
* bsc#1269204
* bsc#1269205
* bsc#1269206
* bsc#1269207

Cross-References:

* CVE-2026-40011
* CVE-2026-40208
* CVE-2026-40209
* CVE-2026-40210
* CVE-2026-40211
* CVE-2026-42004
* CVE-2026-42005

CVSS scores:

* CVE-2026-40011 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-40011 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-40208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-40208 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-40209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-40209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-40210 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-40210 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-40211 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-40211 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-42004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-42004 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-42005 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-42005 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 7 vulnerabilities and has 7 bug fixes can now be installed.

Description:

This update for dnsdist fixes the following issues:

Update to 1.9.15.

Changes for dnsdist:

- https://www.dnsdist.org/changelog.html#change-1.9.15
- https://www.dnsdist.org/changelog.html#change-1.9.14

Security issues fixed:

- CVE-2026-40011: invalid output produced in the prometheus endpoint when a large number of crafted DNS queries are sent
(bsc#1269204).
- CVE-2026-40208: processing of DoH3 queries can be delayed via DoH3 GET queries with an invalid DATA frames
(bsc#1269207).
- CVE-2026-40209: outgoing TCP connections to backend can get stuck until a timeout occurs when specially crafted IXFR
queries are sent (bsc#1269206).
- CVE-2026-40210: out-of-bounds read when `SetMacAddrAction` is used can lead to uninitialized memory being sent over
the network or a crash (bsc#1269205).
- CVE-2026-40211: crafted DNS over HTTP/3 queries can trigger an exception that prevents memory from being freed and can
lead to an OOM condition (bsc#1269203).
- CVE-2026-42004: crafted EDNS OPT record will be ignored by filtering rules, but will be rewritten as a valid OPT
record when EDNS Client Subnet is inserted (bsc#1269202).
- CVE-2026-42005: crafted web request can cause unlimited memory allocation in the internal web server and lead to a DoS
(bsc#1269201).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1432=1

Package List:

- openSUSE Leap 16.0:

dnsdist-1.9.15-160000.1.1

References:

* https://www.suse.com/security/cve/CVE-2026-40011.html
* https://www.suse.com/security/cve/CVE-2026-40208.html
* https://www.suse.com/security/cve/CVE-2026-40209.html
* https://www.suse.com/security/cve/CVE-2026-40210.html
* https://www.suse.com/security/cve/CVE-2026-40211.html
* https://www.suse.com/security/cve/CVE-2026-42004.html
* https://www.suse.com/security/cve/CVE-2026-42005.html



openSUSE-SU-2026:21532-1: critical: Security update for php8


openSUSE security update: security update for php8
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21532-1
Rating: critical
References:

* bsc#1273075
* bsc#1273076
* bsc#1273077
* bsc#1273078

Cross-References:

* CVE-2026-17543
* CVE-2026-17544
* CVE-2026-7260
* CVE-2026-9672

CVSS scores:

* CVE-2026-17543 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-17543 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-17544 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
* CVE-2026-17544 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-7260 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-9672 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 4 vulnerabilities and has 4 bug fixes can now be installed.

Description:

This update for php8 fixes the following issues

- Update to version 8.4.24
- CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
- CVE-2026-9672: Upgrade libgd (bsc#1273078).
- CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
- CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1431=1

Package List:

- openSUSE Leap 16.0:

apache2-mod_php8-8.4.24-160000.1.1
php8-8.4.24-160000.1.1
php8-bcmath-8.4.24-160000.1.1
php8-bz2-8.4.24-160000.1.1
php8-calendar-8.4.24-160000.1.1
php8-cli-8.4.24-160000.1.1
php8-ctype-8.4.24-160000.1.1
php8-curl-8.4.24-160000.1.1
php8-dba-8.4.24-160000.1.1
php8-devel-8.4.24-160000.1.1
php8-dom-8.4.24-160000.1.1
php8-embed-8.4.24-160000.1.1
php8-enchant-8.4.24-160000.1.1
php8-exif-8.4.24-160000.1.1
php8-fastcgi-8.4.24-160000.1.1
php8-ffi-8.4.24-160000.1.1
php8-fileinfo-8.4.24-160000.1.1
php8-fpm-8.4.24-160000.1.1
php8-fpm-apache-8.4.24-160000.1.1
php8-ftp-8.4.24-160000.1.1
php8-gd-8.4.24-160000.1.1
php8-gettext-8.4.24-160000.1.1
php8-gmp-8.4.24-160000.1.1
php8-iconv-8.4.24-160000.1.1
php8-intl-8.4.24-160000.1.1
php8-ldap-8.4.24-160000.1.1
php8-mbstring-8.4.24-160000.1.1
php8-mysql-8.4.24-160000.1.1
php8-odbc-8.4.24-160000.1.1
php8-opcache-8.4.24-160000.1.1
php8-openssl-8.4.24-160000.1.1
php8-pcntl-8.4.24-160000.1.1
php8-pdo-8.4.24-160000.1.1
php8-pgsql-8.4.24-160000.1.1
php8-phar-8.4.24-160000.1.1
php8-posix-8.4.24-160000.1.1
php8-readline-8.4.24-160000.1.1
php8-shmop-8.4.24-160000.1.1
php8-snmp-8.4.24-160000.1.1
php8-soap-8.4.24-160000.1.1
php8-sockets-8.4.24-160000.1.1
php8-sodium-8.4.24-160000.1.1
php8-sqlite-8.4.24-160000.1.1
php8-sysvmsg-8.4.24-160000.1.1
php8-sysvsem-8.4.24-160000.1.1
php8-sysvshm-8.4.24-160000.1.1
php8-test-8.4.24-160000.1.1
php8-tidy-8.4.24-160000.1.1
php8-tokenizer-8.4.24-160000.1.1
php8-xmlreader-8.4.24-160000.1.1
php8-xmlwriter-8.4.24-160000.1.1
php8-xsl-8.4.24-160000.1.1
php8-zip-8.4.24-160000.1.1
php8-zlib-8.4.24-160000.1.1

References:

* https://www.suse.com/security/cve/CVE-2026-17543.html
* https://www.suse.com/security/cve/CVE-2026-17544.html
* https://www.suse.com/security/cve/CVE-2026-7260.html
* https://www.suse.com/security/cve/CVE-2026-9672.html



openSUSE-SU-2026:11445-1: moderate: bouncycastle-1.85-1.1 on GA media


# bouncycastle-1.85-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11445-1
Rating: moderate

Cross-References:

* CVE-2026-12185
* CVE-2026-12802
* CVE-2026-12803
* CVE-2026-12816
* CVE-2026-12817
* CVE-2026-12852
* CVE-2026-12860
* CVE-2026-13506
* CVE-2026-13586
* CVE-2026-14682
* CVE-2026-15055
* CVE-2026-58059
* CVE-2026-58060
* CVE-2026-58061
* CVE-2026-58062
* CVE-2026-58063
* CVE-2026-59638
* CVE-2026-59639
* CVE-2026-59640
* CVE-2026-59641
* CVE-2026-59642
* CVE-2026-59643
* CVE-2026-59644
* CVE-2026-59645
* CVE-2026-59646
* CVE-2026-59647
* CVE-2026-59648
* CVE-2026-59649
* CVE-2026-59650
* CVE-2026-59651
* CVE-2026-59652
* CVE-2026-8763

CVSS scores:

* CVE-2026-12185 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2026-12185 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-12802 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-12802 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12803 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-12803 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12816 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-12816 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12817 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-12817 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-12852 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-12852 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-12860 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-12860 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-13506 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-13506 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-13586 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-13586 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-14682 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-14682 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-15055 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-15055 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-58059 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58059 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-58060 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58060 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-58061 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-58061 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-58062 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-58062 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-58063 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-58063 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-59638 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-59638 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59639 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-59639 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-59640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-59641 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59642 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-59642 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59643 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-59643 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59644 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-59644 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-59645 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-59645 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-59646 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-59646 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-59647 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-59647 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-59648 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-59648 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-59649 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-59649 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-59650 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-59650 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59651 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
* CVE-2026-59651 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-59652 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-59652 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-8763 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-8763 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves 32 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the bouncycastle-1.85-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* bouncycastle 1.85-1.1
* bouncycastle-javadoc 1.85-1.1
* bouncycastle-jmail 1.85-1.1
* bouncycastle-mail 1.85-1.1
* bouncycastle-pg 1.85-1.1
* bouncycastle-pkix 1.85-1.1
* bouncycastle-tls 1.85-1.1
* bouncycastle-util 1.85-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-12185.html
* https://www.suse.com/security/cve/CVE-2026-12802.html
* https://www.suse.com/security/cve/CVE-2026-12803.html
* https://www.suse.com/security/cve/CVE-2026-12816.html
* https://www.suse.com/security/cve/CVE-2026-12817.html
* https://www.suse.com/security/cve/CVE-2026-12852.html
* https://www.suse.com/security/cve/CVE-2026-12860.html
* https://www.suse.com/security/cve/CVE-2026-13506.html
* https://www.suse.com/security/cve/CVE-2026-13586.html
* https://www.suse.com/security/cve/CVE-2026-14682.html
* https://www.suse.com/security/cve/CVE-2026-15055.html
* https://www.suse.com/security/cve/CVE-2026-58059.html
* https://www.suse.com/security/cve/CVE-2026-58060.html
* https://www.suse.com/security/cve/CVE-2026-58061.html
* https://www.suse.com/security/cve/CVE-2026-58062.html
* https://www.suse.com/security/cve/CVE-2026-58063.html
* https://www.suse.com/security/cve/CVE-2026-59638.html
* https://www.suse.com/security/cve/CVE-2026-59639.html
* https://www.suse.com/security/cve/CVE-2026-59640.html
* https://www.suse.com/security/cve/CVE-2026-59641.html
* https://www.suse.com/security/cve/CVE-2026-59642.html
* https://www.suse.com/security/cve/CVE-2026-59643.html
* https://www.suse.com/security/cve/CVE-2026-59644.html
* https://www.suse.com/security/cve/CVE-2026-59645.html
* https://www.suse.com/security/cve/CVE-2026-59646.html
* https://www.suse.com/security/cve/CVE-2026-59647.html
* https://www.suse.com/security/cve/CVE-2026-59648.html
* https://www.suse.com/security/cve/CVE-2026-59649.html
* https://www.suse.com/security/cve/CVE-2026-59650.html
* https://www.suse.com/security/cve/CVE-2026-59651.html
* https://www.suse.com/security/cve/CVE-2026-59652.html
* https://www.suse.com/security/cve/CVE-2026-8763.html



openSUSE-SU-2026:11450-1: moderate: perl-Mojo-JWT-1.20.0-2.1 on GA media


# perl-Mojo-JWT-1.20.0-2.1 on GA media

Announcement ID: openSUSE-SU-2026:11450-1
Rating: moderate

Cross-References:

* CVE-2026-9537

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the perl-Mojo-JWT-1.20.0-2.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* perl-Mojo-JWT 1.20.0-2.1

## References:

* https://www.suse.com/security/cve/CVE-2026-9537.html



openSUSE-SU-2026:11448-1: moderate: ffmpeg-4-4.4.8-3.1 on GA media


# ffmpeg-4-4.4.8-3.1 on GA media

Announcement ID: openSUSE-SU-2026:11448-1
Rating: moderate

Cross-References:

* CVE-2026-64830
* CVE-2026-64832
* CVE-2026-64835
* CVE-2026-66038
* CVE-2026-66039

CVSS scores:

* CVE-2026-64830 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-64830 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-64832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-64835 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-64835 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2026-66038 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
* CVE-2026-66038 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-66039 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
* CVE-2026-66039 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves 5 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the ffmpeg-4-4.4.8-3.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* ffmpeg-4 4.4.8-3.1
* ffmpeg-4-libavcodec-devel 4.4.8-3.1
* ffmpeg-4-libavdevice-devel 4.4.8-3.1
* ffmpeg-4-libavfilter-devel 4.4.8-3.1
* ffmpeg-4-libavformat-devel 4.4.8-3.1
* ffmpeg-4-libavresample-devel 4.4.8-3.1
* ffmpeg-4-libavutil-devel 4.4.8-3.1
* ffmpeg-4-libpostproc-devel 4.4.8-3.1
* ffmpeg-4-libswresample-devel 4.4.8-3.1
* ffmpeg-4-libswscale-devel 4.4.8-3.1
* ffmpeg-4-private-devel 4.4.8-3.1
* libavcodec58_134 4.4.8-3.1
* libavdevice58_13 4.4.8-3.1
* libavfilter7_110 4.4.8-3.1
* libavformat58_76 4.4.8-3.1
* libavresample4_0 4.4.8-3.1
* libavutil56_70 4.4.8-3.1
* libpostproc55_9 4.4.8-3.1
* libswresample3_9 4.4.8-3.1
* libswscale5_9 4.4.8-3.1

## References:

* https://www.suse.com/security/cve/CVE-2026-64830.html
* https://www.suse.com/security/cve/CVE-2026-64832.html
* https://www.suse.com/security/cve/CVE-2026-64835.html
* https://www.suse.com/security/cve/CVE-2026-66038.html
* https://www.suse.com/security/cve/CVE-2026-66039.html



openSUSE-SU-2026:11446-1: moderate: cockpit-repos-4.9-1.1 on GA media


# cockpit-repos-4.9-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11446-1
Rating: moderate

Cross-References:

* CVE-2026-27904

CVSS scores:

* CVE-2026-27904 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-27904 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the cockpit-repos-4.9-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* cockpit-repos 4.9-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-27904.html



openSUSE-SU-2026:11447-1: moderate: cockpit-subscriptions-16.3-1.1 on GA media


# cockpit-subscriptions-16.3-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11447-1
Rating: moderate

Cross-References:

* CVE-2026-27904

CVSS scores:

* CVE-2026-27904 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-27904 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the cockpit-subscriptions-16.3-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* cockpit-subscriptions 16.3-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-27904.html



openSUSE-SU-2026:11442-1: moderate: OpenImageIO-3.1.16.0-1.1 on GA media


# OpenImageIO-3.1.16.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11442-1
Rating: moderate

Cross-References:

* CVE-2026-63419
* CVE-2026-63420
* CVE-2026-63422
* CVE-2026-63635
* CVE-2026-63638
* CVE-2026-65969
* CVE-2026-65970
* CVE-2026-67549

Affected Products:

* openSUSE Tumbleweed

An update that solves 8 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the OpenImageIO-3.1.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* OpenImageIO 3.1.16.0-1.1
* OpenImageIO-devel 3.1.16.0-1.1
* libOpenImageIO3_1 3.1.16.0-1.1
* libOpenImageIO_Util3_1 3.1.16.0-1.1
* python3-OpenImageIO 3.1.16.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-63419.html
* https://www.suse.com/security/cve/CVE-2026-63420.html
* https://www.suse.com/security/cve/CVE-2026-63422.html
* https://www.suse.com/security/cve/CVE-2026-63635.html
* https://www.suse.com/security/cve/CVE-2026-63638.html
* https://www.suse.com/security/cve/CVE-2026-65969.html
* https://www.suse.com/security/cve/CVE-2026-65970.html
* https://www.suse.com/security/cve/CVE-2026-67549.html



openSUSE-SU-2026:11444-1: moderate: azure-storage-azcopy-10.32.6-1.1 on GA media


# azure-storage-azcopy-10.32.6-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11444-1
Rating: moderate

Cross-References:

* CVE-2026-56852

CVSS scores:

* CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56852 ( SUSE ): 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* azure-storage-azcopy 10.32.6-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-56852.html



openSUSE-SU-2026:11443-1: moderate: amazon-ecs-init-1.106.0-1.1 on GA media


# amazon-ecs-init-1.106.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11443-1
Rating: moderate

Cross-References:

* CVE-2026-10722

CVSS scores:

* CVE-2026-10722 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-10722 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the amazon-ecs-init-1.106.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* amazon-ecs-init 1.106.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-10722.html



SUSE-SU-2026:3515-1: important: Security update for openssl-1_1


# Security update for openssl-1_1

Announcement ID: SUSE-SU-2026:3515-1
Release Date: 2026-08-06T11:09:04Z
Rating: important
References:

* bsc#1271712

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that has one security fix can now be installed.

## Description:

This update for openssl-1_1 fixes the following issue

* HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-
controlled memory allocations (bsc#1271712).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3515=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3515=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3515=1

## Package List:

* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* openssl-1_1-1.1.1w-150600.5.35.2
* openssl-1_1-debugsource-1.1.1w-150600.5.35.2
* openssl-1_1-debuginfo-1.1.1w-150600.5.35.2
* libopenssl1_1-debuginfo-1.1.1w-150600.5.35.2
* libopenssl-1_1-devel-1.1.1w-150600.5.35.2
* libopenssl1_1-1.1.1w-150600.5.35.2
* SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64)
* libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.35.2
* libopenssl1_1-32bit-1.1.1w-150600.5.35.2
* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* openssl-1_1-1.1.1w-150600.5.35.2
* openssl-1_1-debugsource-1.1.1w-150600.5.35.2
* openssl-1_1-debuginfo-1.1.1w-150600.5.35.2
* libopenssl1_1-debuginfo-1.1.1w-150600.5.35.2
* libopenssl-1_1-devel-1.1.1w-150600.5.35.2
* libopenssl1_1-1.1.1w-150600.5.35.2
* openSUSE Leap 15.6 (noarch)
* openssl-1_1-doc-1.1.1w-150600.5.35.2
* openSUSE Leap 15.6 (aarch64_ilp32)
* libopenssl1_1-64bit-debuginfo-1.1.1w-150600.5.35.2
* libopenssl1_1-64bit-1.1.1w-150600.5.35.2
* libopenssl-1_1-devel-64bit-1.1.1w-150600.5.35.2
* openSUSE Leap 15.6 (x86_64)
* libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.35.2
* libopenssl-1_1-devel-32bit-1.1.1w-150600.5.35.2
* libopenssl1_1-32bit-1.1.1w-150600.5.35.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* openssl-1_1-1.1.1w-150600.5.35.2
* openssl-1_1-debugsource-1.1.1w-150600.5.35.2
* libopenssl1_1-debuginfo-1.1.1w-150600.5.35.2
* openssl-1_1-debuginfo-1.1.1w-150600.5.35.2
* libopenssl-1_1-devel-1.1.1w-150600.5.35.2
* libopenssl1_1-1.1.1w-150600.5.35.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)
* libopenssl1_1-32bit-debuginfo-1.1.1w-150600.5.35.2
* libopenssl1_1-32bit-1.1.1w-150600.5.35.2

## References:

* https://bugzilla.suse.com/show_bug.cgi?id71712



SUSE-SU-2026:3516-1: important: Security update for openssl-3


# Security update for openssl-3

Announcement ID: SUSE-SU-2026:3516-1
Release Date: 2026-08-06T11:09:20Z
Rating: important
References:

* bsc#1271712

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that has one security fix can now be installed.

## Description:

This update for openssl-3 fixes the following issue

* HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-
controlled memory allocations (bsc#1271712).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3516=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3516=1

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3516=1

## Package List:

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-devel-3.1.4-150600.5.59.1
* openssl-3-debugsource-3.1.4-150600.5.59.1
* openssl-3-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-3.1.4-150600.5.59.1
* libopenssl3-debuginfo-3.1.4-150600.5.59.1
* libopenssl3-3.1.4-150600.5.59.1
* openssl-3-3.1.4-150600.5.59.1
* openSUSE Leap 15.6 (x86_64)
* libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl3-32bit-3.1.4-150600.5.59.1
* libopenssl3-32bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-devel-32bit-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-32bit-3.1.4-150600.5.59.1
* openSUSE Leap 15.6 (aarch64_ilp32)
* libopenssl-3-fips-provider-64bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-devel-64bit-3.1.4-150600.5.59.1
* libopenssl3-64bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl3-64bit-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-64bit-3.1.4-150600.5.59.1
* openSUSE Leap 15.6 (noarch)
* openssl-3-doc-3.1.4-150600.5.59.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-devel-3.1.4-150600.5.59.1
* openssl-3-debugsource-3.1.4-150600.5.59.1
* openssl-3-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-3.1.4-150600.5.59.1
* libopenssl3-debuginfo-3.1.4-150600.5.59.1
* libopenssl3-3.1.4-150600.5.59.1
* openssl-3-3.1.4-150600.5.59.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64)
* libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-32bit-3.1.4-150600.5.59.1
* libopenssl3-32bit-3.1.4-150600.5.59.1
* libopenssl3-32bit-debuginfo-3.1.4-150600.5.59.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-devel-3.1.4-150600.5.59.1
* openssl-3-debugsource-3.1.4-150600.5.59.1
* openssl-3-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-3.1.4-150600.5.59.1
* libopenssl3-debuginfo-3.1.4-150600.5.59.1
* openssl-3-3.1.4-150600.5.59.1
* libopenssl3-3.1.4-150600.5.59.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)
* libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.59.1
* libopenssl-3-fips-provider-32bit-3.1.4-150600.5.59.1
* libopenssl3-32bit-3.1.4-150600.5.59.1
* libopenssl3-32bit-debuginfo-3.1.4-150600.5.59.1

## References:

* https://bugzilla.suse.com/show_bug.cgi?id71712



SUSE-SU-2026:3518-1: important: Security update for rsyslog


# Security update for rsyslog

Announcement ID: SUSE-SU-2026:3518-1
Release Date: 2026-08-06T11:21:57Z
Rating: important
References:

* bsc#1271910
* bsc#1272414

Cross-References:

* CVE-2026-61548

CVSS scores:

* CVE-2026-61548 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* openSUSE Leap 15.4
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5

An update that solves one vulnerability and has one security fix can now be
installed.

## Description:

This update for rsyslog fixes the following issues:

* CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a
stack overwrite (bsc#1272414).
* Input sequence during oversize-frame recovery in imptcp can cause denial of
service (bsc#1271910).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3518=1

* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-3518=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3518=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3518=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3518=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3518=1

* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3518=1

* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3518=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3518=1

## Package List:

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* rsyslog-module-dbi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-omamqp1-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-kafka-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-gcrypt-8.2306.0-150400.5.40.1
* rsyslog-module-gcrypt-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-doc-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-diag-tools-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-omamqp1-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-kafka-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-omhttpfs-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-dbi-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-elasticsearch-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-omhttpfs-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-elasticsearch-8.2306.0-150400.5.40.1
* rsyslog-module-omtcl-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-omtcl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-diag-tools-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* rsyslog-module-gtls-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-mysql-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-debugsource-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-8.2306.0-150400.5.40.1
* rsyslog-module-pgsql-8.2306.0-150400.5.40.1
* rsyslog-module-mmnormalize-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-snmp-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-8.2306.0-150400.5.40.1
* rsyslog-module-ossl-8.2306.0-150400.5.40.1
* rsyslog-8.2306.0-150400.5.40.1
* rsyslog-module-gssapi-debuginfo-8.2306.0-150400.5.40.1
* rsyslog-module-gtls-8.2306.0-150400.5.40.1
* rsyslog-module-relp-8.2306.0-150400.5.40.1
* rsyslog-module-udpspoof-8.2306.0-150400.5.40.1
* rsyslog-module-relp-debuginfo-8.2306.0-150400.5.40.1

## References:

* https://www.suse.com/security/cve/CVE-2026-61548.html
* https://bugzilla.suse.com/show_bug.cgi?id71910
* https://bugzilla.suse.com/show_bug.cgi?id72414



SUSE-SU-2026:3521-1: important: Security update for nodejs22


# Security update for nodejs22

Announcement ID: SUSE-SU-2026:3521-1
Release Date: 2026-08-06T11:31:28Z
Rating: important
References:

* bsc#1272882
* bsc#1272941
* bsc#1272942
* bsc#1272943
* bsc#1272944
* bsc#1272945
* bsc#1272947
* bsc#1272948
* bsc#1272949
* bsc#1272950
* bsc#1272951

Cross-References:

* CVE-2026-54272
* CVE-2026-56846
* CVE-2026-56847
* CVE-2026-56848
* CVE-2026-56850
* CVE-2026-58039
* CVE-2026-58040
* CVE-2026-58042
* CVE-2026-58043
* CVE-2026-58044
* CVE-2026-58045

CVSS scores:

* CVE-2026-54272 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
* CVE-2026-54272 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
* CVE-2026-54272 ( NVD ): 6.9
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-56846 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-56846 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56846 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56847 ( SUSE ): 4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-56847 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-56847 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-56848 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-56848 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56848 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-56850 ( SUSE ): 5.6
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-56850 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-56850 ( NVD ): 4.1 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-58039 ( SUSE ): 4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-58039 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-58039 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-58040 ( SUSE ): 7.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
* CVE-2026-58040 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
* CVE-2026-58040 ( NVD ): 6.3 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
* CVE-2026-58042 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-58042 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58042 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58043 ( SUSE ): 8.6
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
* CVE-2026-58043 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
* CVE-2026-58043 ( NVD ): 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
* CVE-2026-58044 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-58044 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-58044 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-58045 ( SUSE ): 6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-58045 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58045 ( NVD ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that solves 11 vulnerabilities can now be installed.

## Description:

This update for nodejs22 fixes the following issues:

Update to 22.23.2.

* CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6
addresses allows for bypass of SSRF and trust- boundary checks
(bsc#1272882).
* CVE-2026-56846: HTTP/2 retained headers can bypass `maxSessionMemory` limits
(bsc#1272941).
* CVE-2026-56847: permission model allows trace events to write outside the
`allowlist` (bsc#1272949).
* CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free
(bsc#1272942).
* CVE-2026-56850: HTTPS agent can reuse mTLS identities across PFX
certificates (bsc#1272944).
* CVE-2026-58039: permission model allows process reports to write outside the
`allowlist` (bsc#1272950).
* CVE-2026-58040: HTTPS agent session reuse can skip hostname verification
(bsc#1272945).
* CVE-2026-58042: `dns.resolveAny()` can abort on DNS responses with many A
records (bsc#1272947).
* CVE-2026-58043: permission model path matching can over-grant filesystem
access (bsc#1272943).
* CVE-2026-58044: HTTP parser header truncation can enable request smuggling
(bsc#1272951).
* CVE-2026-58045: `node:zlib` sync APIs can crash on spoofed `TypedArray`
length (bsc#1272948).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3521=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3521=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3521=1

## Package List:

* openSUSE Leap 15.6 (noarch)
* nodejs22-docs-22.23.2-150600.13.24.1
* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* nodejs22-devel-22.23.2-150600.13.24.1
* npm22-22.23.2-150600.13.24.1
* corepack22-22.23.2-150600.13.24.1
* nodejs22-22.23.2-150600.13.24.1
* nodejs22-debugsource-22.23.2-150600.13.24.1
* nodejs22-debuginfo-22.23.2-150600.13.24.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* nodejs22-devel-22.23.2-150600.13.24.1
* npm22-22.23.2-150600.13.24.1
* nodejs22-22.23.2-150600.13.24.1
* nodejs22-debugsource-22.23.2-150600.13.24.1
* nodejs22-debuginfo-22.23.2-150600.13.24.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
* nodejs22-docs-22.23.2-150600.13.24.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* nodejs22-devel-22.23.2-150600.13.24.1
* npm22-22.23.2-150600.13.24.1
* nodejs22-22.23.2-150600.13.24.1
* nodejs22-debugsource-22.23.2-150600.13.24.1
* nodejs22-debuginfo-22.23.2-150600.13.24.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
* nodejs22-docs-22.23.2-150600.13.24.1

## References:

* https://www.suse.com/security/cve/CVE-2026-54272.html
* https://www.suse.com/security/cve/CVE-2026-56846.html
* https://www.suse.com/security/cve/CVE-2026-56847.html
* https://www.suse.com/security/cve/CVE-2026-56848.html
* https://www.suse.com/security/cve/CVE-2026-56850.html
* https://www.suse.com/security/cve/CVE-2026-58039.html
* https://www.suse.com/security/cve/CVE-2026-58040.html
* https://www.suse.com/security/cve/CVE-2026-58042.html
* https://www.suse.com/security/cve/CVE-2026-58043.html
* https://www.suse.com/security/cve/CVE-2026-58044.html
* https://www.suse.com/security/cve/CVE-2026-58045.html
* https://bugzilla.suse.com/show_bug.cgi?id72882
* https://bugzilla.suse.com/show_bug.cgi?id72941
* https://bugzilla.suse.com/show_bug.cgi?id72942
* https://bugzilla.suse.com/show_bug.cgi?id72943
* https://bugzilla.suse.com/show_bug.cgi?id72944
* https://bugzilla.suse.com/show_bug.cgi?id72945
* https://bugzilla.suse.com/show_bug.cgi?id72947
* https://bugzilla.suse.com/show_bug.cgi?id72948
* https://bugzilla.suse.com/show_bug.cgi?id72949
* https://bugzilla.suse.com/show_bug.cgi?id72950
* https://bugzilla.suse.com/show_bug.cgi?id72951


p11-kit and libXfont2 updates for Slackware

KDE Quarterly Update: Germany's €1M Investment Targets Digital Sovereignty and PIM Modernization

Windows

Linux

macOS

Community

  • gavindi
    Mt. Sync is a native GNOME desktop application that puts ...
  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...