000release-packages:SLE_HPC-release
n/a
haveged
- add CVE-2026-41054.patch (bsc#1264086, CVE-2026-41054)
kernel-default
- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit ac38eb1

- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit 5ad1196

- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 4cb695b

- x86/CPU/AMD: Prevent improper isolation of shared resources
  in Zen2's op cache (bsc#1264013 CVE-2025-54518).
- commit 7d7d368

- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 01ffac9

- supported.conf: drop rxrpc and af_kfs (bsc#1264450)
- commit b263ed0

- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit 0affe48
mozjs60
- Add security fixes:
  + mozjs60-CVE-2026-32776.patch (bsc#1259728 CVE-2026-32776)
  + mozjs60-CVE-2026-32777.patch (bsc#1259713 CVE-2026-32777)
  + mozjs60-CVE-2026-32778.patch (bsc#1259731 CVE-2026-32778)
openssh
- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.
000release-packages:sle-module-basesystem-release
n/a
000release-packages:sle-module-containers-release
n/a
000release-packages:sle-module-desktop-applications-release
n/a
000release-packages:sle-module-development-tools-release
n/a
000release-packages:sle-module-hpc-release
n/a
000release-packages:sle-module-public-cloud-release
n/a
000release-packages:sle-module-server-applications-release
n/a
000release-packages:sle-module-web-scripting-release
n/a
suse-build-key
- import all keys if they are not yet in the RPM db.

- Added post quantum cryptographic keys for SLES 15 and SLES 16.
  - build-pqc-15.pem
  - build-pqc-16.pem