<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1500</id>
    <title>Security update for opensaml</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749129548"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31335" id="CVE-2025-31335" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31335" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239889" id="1239889" title="VUL-0: CVE-2025-31335: opensaml: Parameter manipulation allows the forging of signed SAML messages" type="bugzilla"/>
    </references>
    <description>This update for opensaml fixes the following issues:

- CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. (bsc#1239889)
</description>
    <pkglist>
      <collection>
        <package name="libsaml-devel" epoch="0" version="3.1.0" release="150300.3.3.1" arch="x86_64" src="x86_64/libsaml-devel-3.1.0-150300.3.3.1.x86_64.rpm">
          <filename>libsaml-devel-3.1.0-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsaml11" epoch="0" version="3.1.0" release="150300.3.3.1" arch="x86_64" src="x86_64/libsaml11-3.1.0-150300.3.3.1.x86_64.rpm">
          <filename>libsaml11-3.1.0-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="opensaml" epoch="0" version="3.1.0" release="150300.3.3.1" arch="src" src="src/opensaml-3.1.0-150300.3.3.1.src.rpm">
          <filename>opensaml-3.1.0-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="opensaml-schemas" epoch="0" version="3.1.0" release="150300.3.3.1" arch="x86_64" src="x86_64/opensaml-schemas-3.1.0-150300.3.3.1.x86_64.rpm">
          <filename>opensaml-schemas-3.1.0-150300.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1698</id>
    <title>Recommended update for wsmancli</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749458909"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237243" id="1237243" title="wsman doesn't work with newer AMT hosts (AMT version 16.x only allows TLS communication)" type="bugzilla"/>
    </references>
    <description>This update for wsmancli fixes the following issue:

- Fix connecting with TLS (bsc#1237243).
</description>
    <pkglist>
      <collection>
        <package name="wsmancli" epoch="0" version="2.6.0" release="150300.7.6.2" arch="src" src="src/wsmancli-2.6.0-150300.7.6.2.src.rpm">
          <filename>wsmancli-2.6.0-150300.7.6.2.src.rpm</filename>
        </package>
        <package name="wsmancli" epoch="0" version="2.6.0" release="150300.7.6.2" arch="x86_64" src="x86_64/wsmancli-2.6.0-150300.7.6.2.x86_64.rpm">
          <filename>wsmancli-2.6.0-150300.7.6.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1548</id>
    <title>Security update for rabbitmq-server313</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749646047"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231656" id="1231656" title="[sle15sp6][rabbitmq-server313]rabbitmq-server.service fails to start with error &quot;Runtime terminating during boot ({error,{rabbitmq_prelaunch,{&quot;no such file or directory&quot;,&quot;rabbitmq_prelaunch.app&quot;}}})&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240071" id="1240071" title="VUL-0: CVE-2025-30219: rabbitmq-server: Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234763" id="1234763" title="rabbitmq-server313 pulls in rabbitmq-server-plugins instead of rabbitmq-server313-plugins" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30219" id="CVE-2025-30219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30219" type="cve"/>
    </references>
    <description>This update for rabbitmq-server313 fixes the following issues:

- CVE-2025-30219: incorrectly escaped virtual hostname present in error message could lead to XSS attack. (bsc#1240071)

Non-security fixes:

- Require rabbitmq-server313-plugins rather then rabbitmq-server-plugins. (bsc#1231656, bsc#1234763)
</description>
    <pkglist>
      <collection>
        <package name="erlang-rabbitmq-client313" epoch="0" version="3.13.1" release="150600.13.8.1" arch="x86_64" src="x86_64/erlang-rabbitmq-client313-3.13.1-150600.13.8.1.x86_64.rpm">
          <filename>erlang-rabbitmq-client313-3.13.1-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313" epoch="0" version="3.13.1" release="150600.13.8.1" arch="src" src="src/rabbitmq-server313-3.13.1-150600.13.8.1.src.rpm">
          <filename>rabbitmq-server313-3.13.1-150600.13.8.1.src.rpm</filename>
        </package>
        <package name="rabbitmq-server313" epoch="0" version="3.13.1" release="150600.13.8.1" arch="x86_64" src="x86_64/rabbitmq-server313-3.13.1-150600.13.8.1.x86_64.rpm">
          <filename>rabbitmq-server313-3.13.1-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313-bash-completion" epoch="0" version="3.13.1" release="150600.13.8.1" arch="noarch" src="noarch/rabbitmq-server313-bash-completion-3.13.1-150600.13.8.1.noarch.rpm">
          <filename>rabbitmq-server313-bash-completion-3.13.1-150600.13.8.1.noarch.rpm</filename>
        </package>
        <package name="rabbitmq-server313-plugins" epoch="0" version="3.13.1" release="150600.13.8.1" arch="x86_64" src="x86_64/rabbitmq-server313-plugins-3.13.1-150600.13.8.1.x86_64.rpm">
          <filename>rabbitmq-server313-plugins-3.13.1-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313-zsh-completion" epoch="0" version="3.13.1" release="150600.13.8.1" arch="noarch" src="noarch/rabbitmq-server313-zsh-completion-3.13.1-150600.13.8.1.noarch.rpm">
          <filename>rabbitmq-server313-zsh-completion-3.13.1-150600.13.8.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1466</id>
    <title>Security update for rabbitmq-server</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749646053"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240071" id="1240071" title="VUL-0: CVE-2025-30219: rabbitmq-server: Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30219" id="CVE-2025-30219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30219" type="cve"/>
    </references>
    <description>This update for rabbitmq-server fixes the following issues:

- CVE-2025-30219: Fixed XSS in an error message in Management UI (bsc#1240071)    
    
Other fixes:
- Disable parallel make, this causes build failures
</description>
    <pkglist>
      <collection>
        <package name="erlang-rabbitmq-client" epoch="0" version="3.8.11" release="150300.3.19.1" arch="x86_64" src="x86_64/erlang-rabbitmq-client-3.8.11-150300.3.19.1.x86_64.rpm">
          <filename>erlang-rabbitmq-client-3.8.11-150300.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server" epoch="0" version="3.8.11" release="150300.3.19.1" arch="src" src="src/rabbitmq-server-3.8.11-150300.3.19.1.src.rpm">
          <filename>rabbitmq-server-3.8.11-150300.3.19.1.src.rpm</filename>
        </package>
        <package name="rabbitmq-server" epoch="0" version="3.8.11" release="150300.3.19.1" arch="x86_64" src="x86_64/rabbitmq-server-3.8.11-150300.3.19.1.x86_64.rpm">
          <filename>rabbitmq-server-3.8.11-150300.3.19.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server-plugins" epoch="0" version="3.8.11" release="150300.3.19.1" arch="x86_64" src="x86_64/rabbitmq-server-plugins-3.8.11-150300.3.19.1.x86_64.rpm">
          <filename>rabbitmq-server-plugins-3.8.11-150300.3.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1685</id>
    <title>Recommended update for sysstat</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749565040"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239297" id="1239297" title="L3: latest sysstat was built with dependency for cron" type="bugzilla"/>
    </references>
    <description>This update for sysstat fixes the following issues:

- Removed cron dependency in favour of systemd timers (bsc#1239297)
- Removed sysstat.cron.suse
</description>
    <pkglist>
      <collection>
        <package name="sysstat" epoch="0" version="12.0.2" release="150000.3.40.1" arch="src" src="src/sysstat-12.0.2-150000.3.40.1.src.rpm">
          <filename>sysstat-12.0.2-150000.3.40.1.src.rpm</filename>
        </package>
        <package name="sysstat-isag" epoch="0" version="12.0.2" release="150000.3.40.1" arch="x86_64" src="x86_64/sysstat-isag-12.0.2-150000.3.40.1.x86_64.rpm">
          <filename>sysstat-isag-12.0.2-150000.3.40.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1733</id>
    <title>Recommended update for krb5</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749544678"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242060" id="1242060" title="krb5-kdc refers to LMDB in man page/docs but we do not compile this db backend" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issue:

- Remove references to the LMDB backend in the kdc.conf manpage (bsc#1242060).</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="150600.11.11.2" arch="src" src="src/krb5-1.20.1-150600.11.11.2.src.rpm">
          <filename>krb5-1.20.1-150600.11.11.2.src.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" epoch="0" version="1.20.1" release="150600.11.11.2" arch="x86_64" src="x86_64/krb5-plugin-kdb-ldap-1.20.1-150600.11.11.2.x86_64.rpm">
          <filename>krb5-plugin-kdb-ldap-1.20.1-150600.11.11.2.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" epoch="0" version="1.20.1" release="150600.11.11.2" arch="x86_64" src="x86_64/krb5-server-1.20.1-150600.11.11.2.x86_64.rpm">
          <filename>krb5-server-1.20.1-150600.11.11.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1511</id>
    <title>Security update for apparmor</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1748511589"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041" id="CVE-2024-10041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241678" id="1241678" title="L3: pam update breaks ssh authentication for local users and sudo authentication - ref:_00D1igLOd._500TrYGZBD:ref" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM. (bsc#1241678)
</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_apparmor" epoch="0" version="3.1.7" release="150600.5.9.1" arch="x86_64" src="x86_64/apache2-mod_apparmor-3.1.7-150600.5.9.1.x86_64.rpm">
          <filename>apache2-mod_apparmor-3.1.7-150600.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor" epoch="0" version="3.1.7" release="150600.5.9.1" arch="src" src="src/apparmor-3.1.7-150600.5.9.1.src.rpm">
          <filename>apparmor-3.1.7-150600.5.9.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1606</id>
    <title>Recommended update for librdkafka</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1748534500"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242842" id="1242842" title="librdkafka consumes 100% CPU" type="bugzilla"/>
    </references>
    <description>This update for librdkafka fixes the following issues:

- Avoid endless loops under certain circumstances (bsc#1242842)
</description>
    <pkglist>
      <collection>
        <package name="librdkafka" epoch="0" version="0.11.6" release="150600.16.3.1" arch="src" src="src/librdkafka-0.11.6-150600.16.3.1.src.rpm">
          <filename>librdkafka-0.11.6-150600.16.3.1.src.rpm</filename>
        </package>
        <package name="librdkafka-devel" epoch="0" version="0.11.6" release="150600.16.3.1" arch="x86_64" src="x86_64/librdkafka-devel-0.11.6-150600.16.3.1.x86_64.rpm">
          <filename>librdkafka-devel-0.11.6-150600.16.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1779</id>
    <title>Security update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749212450"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242300" id="1242300" title="VUL-0: CVE-2025-47268: iputils: integer overflow in RTT calculation can lead to undefined behavior" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243284" id="1243284" title="https://bugzilla.suse.com/show_bug.cgi?id=1243284" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47268" id="CVE-2025-47268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47268" type="cve"/>
    </references>
    <description>This update for iputils fixes the following issues:

Security fixes:
    
- CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300).

Other bug fixes:
    
- Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian systems (bsc#1243284).
  
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.19.1" arch="src" src="src/iputils-20211215-150400.3.19.1.src.rpm">
          <filename>iputils-20211215-150400.3.19.1.src.rpm</filename>
        </package>
        <package name="rarpd" epoch="0" version="20211215" release="150400.3.19.1" arch="x86_64" src="x86_64/rarpd-20211215-150400.3.19.1.x86_64.rpm">
          <filename>rarpd-20211215-150400.3.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1811</id>
    <title>Security update for gnuplot</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752677376"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241684" id="1241684" title="VUL-0: CVE-2025-3359: gnuplot: gnuplot: Segmentation fault via IO_str_init_static_internal function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240328" id="1240328" title="VUL-0: CVE-2025-31179: gnuplot: segmentation fault on xstrftime" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240325" id="1240325" title="VUL-0: CVE-2025-31176: gnuplot: segmentation fault on plot3d_points" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240329" id="1240329" title="VUL-0: CVE-2025-31180: gnuplot: segmentation fault on CANVAS_text" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240330" id="1240330" title="VUL-0: CVE-2025-31181: gnuplot: segmentation fault on X11_graphics" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240326" id="1240326" title="VUL-0: CVE-2025-31177: gnuplot: heap-buffer overflow on utf8_copy_one" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240327" id="1240327" title="VUL-0: CVE-2025-31178: gnuplot: segmentation fault on GetAnnotateString" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31180" id="CVE-2025-31180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31178" id="CVE-2025-31178" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31178" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31176" id="CVE-2025-31176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31179" id="CVE-2025-31179" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31179" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3359" id="CVE-2025-3359" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3359" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31181" id="CVE-2025-31181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31181" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31177" id="CVE-2025-31177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31177" type="cve"/>
    </references>
    <description>This update for gnuplot fixes the following issues:

- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).
- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).
- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).
- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).
- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).
- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).
- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).
</description>
    <pkglist>
      <collection>
        <package name="gnuplot" epoch="0" version="5.4.3" release="150400.3.3.1" arch="src" src="src/gnuplot-5.4.3-150400.3.3.1.src.rpm">
          <filename>gnuplot-5.4.3-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="gnuplot" epoch="0" version="5.4.3" release="150400.3.3.1" arch="x86_64" src="x86_64/gnuplot-5.4.3-150400.3.3.1.x86_64.rpm">
          <filename>gnuplot-5.4.3-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="gnuplot-doc" epoch="0" version="5.4.3" release="150400.3.3.1" arch="noarch" src="noarch/gnuplot-doc-5.4.3-150400.3.3.1.noarch.rpm">
          <filename>gnuplot-doc-5.4.3-150400.3.3.1.noarch.rpm</filename>
        </package>
        <package name="gnuplot-doc" epoch="0" version="5.4.3" release="150400.3.3.1" arch="src" src="src/gnuplot-doc-5.4.3-150400.3.3.1.src.rpm">
          <filename>gnuplot-doc-5.4.3-150400.3.3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1766</id>
    <title>Security update for postgresql16</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749044260"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242931" id="1242931" title="VUL-0: CVE-2025-4207: postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4207" id="CVE-2025-4207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4207" type="cve"/>
    </references>
    <description>This update for postgresql16 fixes the following issues:

Upgrade to 16.9:

 - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/16.9/
</description>
    <pkglist>
      <collection>
        <package name="postgresql16" epoch="0" version="16.9" release="150600.16.18.1" arch="src" src="src/postgresql16-16.9-150600.16.18.1.src.rpm">
          <filename>postgresql16-16.9-150600.16.18.1.src.rpm</filename>
        </package>
        <package name="postgresql16" epoch="0" version="16.9" release="150600.16.18.1" arch="x86_64" src="x86_64/postgresql16-16.9-150600.16.18.1.x86_64.rpm">
          <filename>postgresql16-16.9-150600.16.18.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server" epoch="0" version="16.9" release="150600.16.18.1" arch="x86_64" src="x86_64/postgresql16-server-16.9-150600.16.18.1.x86_64.rpm">
          <filename>postgresql16-server-16.9-150600.16.18.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1644</id>
    <title>Security update for postgresql17</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1748525404"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242931" id="1242931" title="VUL-0: CVE-2025-4207: postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4207" id="CVE-2025-4207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4207" type="cve"/>
    </references>
    <description>This update for postgresql17 fixes the following issues:

Upgrade to 17.5:

 - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/17.5/
</description>
    <pkglist>
      <collection>
        <package name="libecpg6" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/libecpg6-17.5-150600.13.13.1.x86_64.rpm">
          <filename>libecpg6-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17" epoch="0" version="17.5" release="150600.13.13.1" arch="src" src="src/postgresql17-17.5-150600.13.13.1.src.rpm">
          <filename>postgresql17-17.5-150600.13.13.1.src.rpm</filename>
        </package>
        <package name="postgresql17-contrib" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-contrib-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-contrib-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-devel" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-devel-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-devel-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-docs" epoch="0" version="17.5" release="150600.13.13.1" arch="noarch" src="noarch/postgresql17-docs-17.5-150600.13.13.1.noarch.rpm">
          <filename>postgresql17-docs-17.5-150600.13.13.1.noarch.rpm</filename>
        </package>
        <package name="postgresql17-plperl" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-plperl-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-plperl-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-plpython" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-plpython-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-plpython-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pltcl" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-pltcl-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-pltcl-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-server-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-server-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server-devel" epoch="0" version="17.5" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-server-devel-17.5-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-server-devel-17.5-150600.13.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1888</id>
    <title>Security update for nbdkit</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749620608"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47712" id="CVE-2025-47712" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47712" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47711" id="CVE-2025-47711" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47711" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243110" id="1243110" title="VUL-0: CVE-2025-47711: nbd,nbdkit: offnbdkit-by-one error when processing block status may lead to a Denial of Service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243108" id="1243108" title="VUL-0: CVE-2025-47712: nbd,nbdkit: integer overflow triggers an assertion resulting in Denial of Service" type="bugzilla"/>
    </references>
    <description>This update for nbdkit fixes the following issues:

Update to version 1.40.6.

Security fixes:

- CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 2**32
  will trigger an assertion failure and cause a denial-of-service. (bsc#1243108).
- CVE-2025-47711: off-by-one error when processing block status results from plugins on behalf of an NBD client may
  trigger an assertion failure and cause a denial of service (bsc#1243110).

Other fixes and changes:

- golang: Support GCC 15.
- openbsd: curl: Include pthread.h.
- rust: Fix &quot;overindented&quot; list in comment.
- rust: Declare explicit extern &quot;C&quot; API.
- plugins/rust: Use CStr literals for static strings.
- vddk: do_extents: Avoid reading partial chunk beyond the end of the disk.
- vddk: do_extents: Exit the function if we hit req_one condition.
- vddk: do_extents: Mark some local variables const.
- vddk: Cache the disk size in the handle.
- vddk: Include &lt;stdbool.h&gt;.
- python: examples: Fix comment above API_VERSION constant.
- tcl: Fix for Tcl 9.0 compatibility.
- plugins/ocaml/NBDKit.ml: Sort bindings into order.
- ocaml: Don't call abort if caml_c_thread_unregister fails.
- ocaml: Use real addresses instead of (void*)&lt;constant&gt;s.
- evil: Link to nbdkit_parse_probability(3).
</description>
    <pkglist>
      <collection>
        <package name="nbdkit" epoch="0" version="1.40.6" release="150700.4.3.1" arch="src" src="src/nbdkit-1.40.6-150700.4.3.1.src.rpm">
          <filename>nbdkit-1.40.6-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="nbdkit" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-basic-filters" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-basic-filters-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-basic-filters-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-basic-plugins" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-basic-plugins-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-basic-plugins-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-curl-plugin" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-curl-plugin-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-curl-plugin-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-nbd-plugin" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-nbd-plugin-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-nbd-plugin-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-python-plugin" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-python-plugin-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-python-plugin-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-server" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-server-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-server-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-ssh-plugin" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-ssh-plugin-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-ssh-plugin-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="nbdkit-vddk-plugin" epoch="0" version="1.40.6" release="150700.4.3.1" arch="x86_64" src="x86_64/nbdkit-vddk-plugin-1.40.6-150700.4.3.1.x86_64.rpm">
          <filename>nbdkit-vddk-plugin-1.40.6-150700.4.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1747</id>
    <title>Security update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1748522434"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242971" id="1242971" title="VUL-0: CVE-2025-4382: grub2: GRUB TPM Auto- decryption Data Exposure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237174" id="1237174" title="SLES15 SP7 : bootlist command adding additional nvme disks names in bootlist command output after sles15sp7 installation(nvme/splitter/multipath/P11/Denali/Sles15sp7)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4382" id="CVE-2025-4382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4382" type="cve"/>
    </references>
    <description>This update for grub2 fixes the following issues:

Security fixes:

- CVE-2025-4382: exposure of data from encrypted device through CLI once the root device is successfully unlocked via
  TPM (bsc#1242971).

Other bug fixes:

- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174).
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.3.1" arch="src" src="src/grub2-2.12-150700.19.3.1.src.rpm">
          <filename>grub2-2.12-150700.19.3.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.3.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.3.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.3.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1787</id>
    <title>Security update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1748625320"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40775" id="CVE-2025-40775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11187" id="CVE-2024-11187" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11187" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12705" id="CVE-2024-12705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12705" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236597" id="1236597" title="VUL-0: CVE-2024-12705: bind: DNS-over-HTTPS implementation suffers from multiple issues under  heavy query load" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236596" id="1236596" title="VUL-0: CVE-2024-11187: bind: Many records in the additional section cause CPU exhaustion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243361" id="1243361" title="VUL-0: CVE-2025-40775: bind: NS message with invalid TSIG causes an assertion failure" type="bugzilla"/>
    </references>
    <description>This update for bind fixes the following issues:

Update to version 9.20.9.

- Security issues fixed:

  * CVE-2025-40775: denial-of-service due to assertion failure caused by the processing of a NS message with an invalid
    TSIG (bsc#1243361).
  * CVE-2024-12705: CPU and memory exhaustion due to DNS-over-HTTPS issues that arise under heavy query load
    (bsc#1236597).
  * CVE-2024-11187: CPU exhaustion when processing queries that lead to responses containing several records in the
    Additional data section (bsc#1236596).

- Changelog:

  - Feature changes:
    * Performance optimization for NSEC3 lookups introduced in BIND 9.20.2
      was reverted to avoid risks associated with a complex code change.
    * The configuration clauses parental-agents and primaries are renamed
      to remote-servers.
    * Add none parameter to query-source and query-source-v6 to disable
      IPv4 or IPv6 upstream queries but allow listening to queries from
      clients on IPv4 or IPv6.
    * dnssec-ksr now supports KSK rollovers.
    * Print RFC 7314: EXPIRE option in transfer summary.
    * Emit more helpful log messages for exceeding max-records-per-type.
    * Harden key management when key files have become unavailable.
  
  - New Features:
    * Add support for EDE 20 (Not Authoritative).
    * Add support for EDE 7 and EDE 8.
    * `dig` can now display the received BADVERS message during
      negotiation.
    * Add an `rndc` command to reset some statistics counters.
    * Implement the min-transfer-rate-in configuration option.
    * Add HTTPS record query to host command line tool.
    * Implement sig0key-checks-limit and sig0message-checks-limit.
    * Adds support for EDE code 1 and 2.
    * Add an rndc command to toggle jemalloc profiling.
    * Add support for multiple extended DNS errors.
    * Print the expiration time of stale records.
    * Add Extended DNS Error Code 22 - No Reachable Authority.
    * Add a new option to configure the maximum number of outgoing queries
      per client request.
    * Use the Server Name Indication (SNI) extension for all outgoing TLS
      connections.
    * Update built-in bind.keys file with the new 2025 IANA root key.
    * Add an initial-ds entry to bind.keys for the new root key, ID
      38696, which is scheduled for publication in January 2025.
  
  - Bug Fixes:
    * Restore NSEC3 closest-encloser lookup improvements.
    * Stop caching lack of EDNS support.
    * Fix resolver statistics counters for timed-out responses.
    * Nested DNS validation could cause an assertion failure.
    * Wait for memory reclamation to finish in `named-checkconf`.
    * Ensure `max-clients-per-query` is at least `clients-per-query`.
    * Fix write after free in validator code.
    * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
    * Fix several small DNSSEC timing issues.
    * Fix inconsistency in CNAME/DNAME handling during resolution.
    * Fix dual-stack-servers configuration option.
    * Fix a data race causing a permanent active client increase.
    * Fix deferred validation of unsigned DS and DNSKEY records.
    * Fix RPZ race condition during a reconfiguration.
    * &quot;CNAME and other data check&quot; not applied to all types.
    * Relax private DNSKEY and RRSIG constraints.
    * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    * Fix TTL issue with ANY queries processed through RPZ &quot;passthru&quot;;.
    * dnssec-signzone needs to check for a NULL key when setting offline.
    * Fix a bug in the statistics channel when querying zone transfer
      information.
    * Fix assertion failure when dumping recursing clients.
    * Dump the active resolver fetches from dns_resolver_dumpfetches().
    * Recently expired records could be returned with a timestamp in
      future.
    * YAML string not terminated in negative response in delv.
    * Fix a bug in dnssec-signzone related to keys being offline.
    * Apply the memory limit only to ADB database items.
    * Avoid unnecessary locking in the zone/cache database.
    * Fix reporting of Extended DNS Error 22 (No Reachable Authority).
    * Fix nsupdate hang when processing a large update.
    * Fix possible assertion failure when reloading server while
      processing update policy rules.
    * Preserve cache across reconfig when using attach-cache.
    * Resolve the spurious drops in performance due to glue cache.
    * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys.
    * Fix improper handling of unknown directives in resolv.conf.
    * Fix response policy zones and catalog zones with an $INCLUDE
      statement defined.
    * Use TLS for notifies if configured to do so.
    * Notifies configured to use TLS will now be sent over TLS, instead of
      plain text UDP or TCP. Also, failing to load the TLS
      configuration for notify now results in an error.'
    * {&amp;dns} is as valid as {?dns} in a SVCB's dohpath.
    * dig failed to parse a valid SVCB record with a dohpath URI template
      containing a {&amp;dns}, like
      &quot;dohpath=/some/path?key=value{&amp;dns}&quot;;. 
    * Fix NSEC3 closest encloser lookup for names with empty non-terminals.
    * A previous performance optimization for finding the NSEC3 closest
      encloser when generating authoritative responses could cause servers
      to return incorrect NSEC3 records in some cases. This has been fixed.
    * recursive-clients statement with value 0 triggered an assertion
      failure.
    * BIND 9.20.0 broke recursive-clients 0;. This has now been fixed.
    * Parsing of hostnames in rndc.conf was broken.
    * When DSCP support was removed, parsing of hostnames in rndc.conf was
      accidentally broken, resulting in an assertion failure. This has been
      fixed.
    * `dig` options of the form [+-]option=&lt;value&gt; failed to display
      the value on the printed command line. This has been fixed.
    * Provide more visibility into TLS configuration errors by logging
      SSL_CTX_use_certificate_chain_file() and
      SSL_CTX_use_PrivateKey_file() errors individually.
    * Fix a race condition when canceling ADB find which could cause an
      assertion failure.
    * SERVFAIL cache memory cleaning is now more aggressive; it no longer
      consumes a lot of memory if the server encounters many SERVFAILs at
      once.
    * Fix trying the next primary XoT server when the previous one was
      marked as unreachable.
    * In some cases named failed to try the next primary server in the
      primaries list when the previous one was marked as unreachable. This
      has been fixed.
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.9" release="150700.3.3.1" arch="src" src="src/bind-9.20.9-150700.3.3.1.src.rpm">
          <filename>bind-9.20.9-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.9" release="150700.3.3.1" arch="x86_64" src="x86_64/bind-9.20.9-150700.3.3.1.x86_64.rpm">
          <filename>bind-9.20.9-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.9" release="150700.3.3.1" arch="noarch" src="noarch/bind-doc-9.20.9-150700.3.3.1.noarch.rpm">
          <filename>bind-doc-9.20.9-150700.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2256</id>
    <title>Recommended update for xca</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752063945"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240383" id="1240383" title="xca: wrong certificate revoked when using &quot;renew&quot; with &quot;keep serial number&quot;" type="bugzilla"/>
    </references>
    <description>This update for xca fixes the following issue:

- Keep serial number and revoke old certificate, otherwise the newly created
  certificate is immediately revoked (bsc#1240383).</description>
    <pkglist>
      <collection>
        <package name="xca" epoch="0" version="2.3.0" release="150600.12.6.2" arch="src" src="src/xca-2.3.0-150600.12.6.2.src.rpm">
          <filename>xca-2.3.0-150600.12.6.2.src.rpm</filename>
        </package>
        <package name="xca" epoch="0" version="2.3.0" release="150600.12.6.2" arch="x86_64" src="x86_64/xca-2.3.0-150600.12.6.2.x86_64.rpm">
          <filename>xca-2.3.0-150600.12.6.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-907</id>
    <title>Security update for kea</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773765154"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32801" id="CVE-2025-32801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32801" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32802" id="CVE-2025-32802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32802" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32803" id="CVE-2025-32803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32803" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243240" id="1243240" title="VUL-0: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803: kea: multiple issues" type="bugzilla"/>
    </references>
    <description>This update for kea fixes the following issues:

Update to release 2.6.3 (bsc#1243240):

- CVE-2025-32801: Loading a malicious hook library can lead to local privilege escalation.
- CVE-2025-32802: Insecure handling of file paths allows multiple local attacks.
- CVE-2025-32803: Insecure file permissions can result in confidential information leakage.
</description>
    <pkglist>
      <collection>
        <package name="kea" epoch="0" version="2.6.3" release="150700.3.3.5" arch="src" src="src/kea-2.6.3-150700.3.3.5.src.rpm">
          <filename>kea-2.6.3-150700.3.3.5.src.rpm</filename>
        </package>
        <package name="kea" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/kea-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>kea-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="kea-devel" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/kea-devel-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>kea-devel-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="kea-doc" epoch="0" version="2.6.3" release="150700.3.3.5" arch="noarch" src="noarch/kea-doc-2.6.3-150700.3.3.5.noarch.rpm">
          <filename>kea-doc-2.6.3-150700.3.3.5.noarch.rpm</filename>
        </package>
        <package name="kea-hooks" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/kea-hooks-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>kea-hooks-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-asiodns49" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-asiodns49-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-asiodns49-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-asiolink72" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-asiolink72-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-asiolink72-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-cc68" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-cc68-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-cc68-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-cfgclient66" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-cfgclient66-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-cfgclient66-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-cryptolink50" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-cryptolink50-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-cryptolink50-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-d2srv47" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-d2srv47-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-d2srv47-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-database62" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-database62-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-database62-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcp++92" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-dhcp++92-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-dhcp++92-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcp_ddns57" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-dhcp_ddns57-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-dhcp_ddns57-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcpsrv111" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-dhcpsrv111-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-dhcpsrv111-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-dns++57" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-dns++57-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-dns++57-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-eval69" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-eval69-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-eval69-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-exceptions33" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-exceptions33-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-exceptions33-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-hooks100" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-hooks100-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-hooks100-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-http72" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-http72-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-http72-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-log61" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-log61-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-log61-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-mysql71" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-mysql71-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-mysql71-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-pgsql71" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-pgsql71-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-pgsql71-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-process74" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-process74-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-process74-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-stats41" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-stats41-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-stats41-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-tcp19" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-tcp19-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-tcp19-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-util-io0" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-util-io0-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-util-io0-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
        <package name="libkea-util86" epoch="0" version="2.6.3" release="150700.3.3.5" arch="x86_64" src="x86_64/libkea-util86-2.6.3-150700.3.3.5.x86_64.rpm">
          <filename>libkea-util86-2.6.3-150700.3.3.5.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1942</id>
    <title>Security update for valkey</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749803629"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27151" id="CVE-2025-27151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21605" id="CVE-2025-21605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21605" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49112" id="CVE-2025-49112" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49112" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243061" id="1243061" title="L3: Valkey crashes in openssl-3 lib with null pointer de-reference [ref:_00D1igLOd._500TrZUuWt:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243804" id="1243804" title="VUL-0: CVE-2025-27151: redis,redis7,valkey: absence of filename size check may cause a stack overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241708" id="1241708" title="VUL-0: CVE-2025-21605: redis,redis7,valkey: Output buffer denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243913" id="1243913" title="VUL-0: CVE-2025-49112: valkey: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-&gt;size - prev-&gt;used." type="bugzilla"/>
    </references>
    <description>This update for valkey fixes the following issues:

- CVE-2025-27151: Absence of filename size check may cause a stack
  overflow (bsc#1243804)
- CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913)
- CVE-2025-21605: Output buffer denial of service (bsc#1241708)
</description>
    <pkglist>
      <collection>
        <package name="valkey" epoch="0" version="8.0.2" release="150700.3.5.1" arch="src" src="src/valkey-8.0.2-150700.3.5.1.src.rpm">
          <filename>valkey-8.0.2-150700.3.5.1.src.rpm</filename>
        </package>
        <package name="valkey" epoch="0" version="8.0.2" release="150700.3.5.1" arch="x86_64" src="x86_64/valkey-8.0.2-150700.3.5.1.x86_64.rpm">
          <filename>valkey-8.0.2-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="valkey-compat-redis" epoch="0" version="8.0.2" release="150700.3.5.1" arch="noarch" src="noarch/valkey-compat-redis-8.0.2-150700.3.5.1.noarch.rpm">
          <filename>valkey-compat-redis-8.0.2-150700.3.5.1.noarch.rpm</filename>
        </package>
        <package name="valkey-devel" epoch="0" version="8.0.2" release="150700.3.5.1" arch="x86_64" src="x86_64/valkey-devel-8.0.2-150700.3.5.1.x86_64.rpm">
          <filename>valkey-devel-8.0.2-150700.3.5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1953</id>
    <title>Security update for apache2-mod_auth_openidc</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749822938"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3891" id="CVE-2025-3891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3891" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242015" id="1242015" title="VUL-0: CVE-2025-3891: apache2-mod_auth_openidc: denial of service via a POST request with an empty Content-Type header when OIDCPreservePost is enabled" type="bugzilla"/>
    </references>
    <description>This update for apache2-mod_auth_openidc fixes the following issues:

- CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled (bsc#1242015).
</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.3.8" release="150600.16.11.1" arch="src" src="src/apache2-mod_auth_openidc-2.3.8-150600.16.11.1.src.rpm">
          <filename>apache2-mod_auth_openidc-2.3.8-150600.16.11.1.src.rpm</filename>
        </package>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.3.8" release="150600.16.11.1" arch="x86_64" src="x86_64/apache2-mod_auth_openidc-2.3.8-150600.16.11.1.x86_64.rpm">
          <filename>apache2-mod_auth_openidc-2.3.8-150600.16.11.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2028</id>
    <title>Security update for apache2-mod_security2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1750346212"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48866" id="CVE-2025-48866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48866" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47947" id="CVE-2025-47947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47947" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243976" id="1243976" title="VUL-0: CVE-2025-48866: apache2-mod_security2,modsecurity: excessive number of arguments in sanitiseArg can lead to a denial of service due to high memory consumption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243978" id="1243978" title="VUL-0: CVE-2025-47947: apache2-mod_security2: DoS through sanitiseMatchedBytes" type="bugzilla"/>
    </references>
    <description>This update for apache2-mod_security2 fixes the following issues:

- CVE-2025-47947: Fixed denial of service through sanitiseMatchedBytes (bsc#1243978).
- CVE-2025-48866: Fixed denial of service via excessive number of arguments in sanitiseArg (bsc#1243976).
</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_security2" epoch="0" version="2.9.4" release="150400.3.9.1" arch="src" src="src/apache2-mod_security2-2.9.4-150400.3.9.1.src.rpm">
          <filename>apache2-mod_security2-2.9.4-150400.3.9.1.src.rpm</filename>
        </package>
        <package name="apache2-mod_security2" epoch="0" version="2.9.4" release="150400.3.9.1" arch="x86_64" src="x86_64/apache2-mod_security2-2.9.4-150400.3.9.1.x86_64.rpm">
          <filename>apache2-mod_security2-2.9.4-150400.3.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-1854</id>
    <title>Recommended update for virt-manager</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1749534925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241119" id="1241119" title="virt-manager shows error &quot;ValueError: Namespace Libosinfo not available&quot; due to missing package dependencies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241082" id="1241082" title="[Build 20250410] virt_install fails to launch: missing dependencies" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239837" id="1239837" title="[SLFO] virt-manager still has unresolved dependencies in beta2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236252" id="1236252" title="SLE16 not in osinfo-db" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027942" id="1027942" title="virt-manager: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243296" id="1243296" title="What version of virt-manager-common supports SLES16 ISO layout" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-8910" id="PED-8910" title="https://jira.suse.com/browse/PED-8910" type="jira"/>
    </references>
    <description>This update for virt-manager fixes the following issues:

- Add detection code for SLES 16 media (bsc#1236252, bsc#1243296)
- Spec file changes for including the correct dependencies
  depending on the distro. (bsc#1241082 and bsc#1241119)
- Upstream features and bug fixes (bsc#1027942) (jsc#PED-8910)
- [Build 20250410] virt_install fails to launch:
  missing dependencies (bsc#1241082).
  Spec file modifications
- [SLFO] virt-manager still has unresolved
  dependencies in beta2 (bsc#1239837)
  Remove dependencies on spice and other Gtk sources as these
  packages don't exist in SLES16. Cleanup other dependencies.
  virt-manager.spec
- [SLES15 SP7] Refresh Virtualization Tools for Xen and KVM Management (jsc#PED-8910)
</description>
    <pkglist>
      <collection>
        <package name="virt-install" epoch="0" version="5.0.0" release="150700.7.3.1" arch="noarch" src="noarch/virt-install-5.0.0-150700.7.3.1.noarch.rpm">
          <filename>virt-install-5.0.0-150700.7.3.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.3.1" arch="noarch" src="noarch/virt-manager-5.0.0-150700.7.3.1.noarch.rpm">
          <filename>virt-manager-5.0.0-150700.7.3.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.3.1" arch="src" src="src/virt-manager-5.0.0-150700.7.3.1.src.rpm">
          <filename>virt-manager-5.0.0-150700.7.3.1.src.rpm</filename>
        </package>
        <package name="virt-manager-common" epoch="0" version="5.0.0" release="150700.7.3.1" arch="noarch" src="noarch/virt-manager-common-5.0.0-150700.7.3.1.noarch.rpm">
          <filename>virt-manager-common-5.0.0-150700.7.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2512</id>
    <title>Recommended update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753348248"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-12599" id="PED-12599" title="https://jira.suse.com/browse/PED-12599" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245541" id="1245541" title="kubevirt vm fail to boot in efi mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244488" id="1244488" title="SLES16: &quot;snapshot-revert&quot; is failing with unsupported error" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- qemu: Fix NVRAM image conversion check (bsc#1245541)
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting domain XML
- qemu: Fix failure when reverting to internal snapshots (bsc#1244488)
- Add support for 'sparse' save image format
- Add support for parallel save and restore
- Improve VM Suspend and Resume Performance (jsc#PED-12599)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.7.1" arch="src" src="src/libvirt-11.0.0-150700.4.7.1.src.rpm">
          <filename>libvirt-11.0.0-150700.4.7.1.src.rpm</filename>
        </package>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-client-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-client-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-client-qemu-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-client-qemu-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-common-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-common-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-nwfilter" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-config-nwfilter-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-config-nwfilter-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-libxl" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-libxl-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-libxl-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-log-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-log-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-sanlock-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-xen" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-daemon-xen-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-daemon-xen-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-devel-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-devel-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" epoch="0" version="11.0.0" release="150700.4.7.1" arch="noarch" src="noarch/libvirt-doc-11.0.0-150700.4.7.1.noarch.rpm">
          <filename>libvirt-doc-11.0.0-150700.4.7.1.noarch.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="11.0.0" release="150700.4.7.1" arch="x86_64" src="x86_64/libvirt-nss-11.0.0-150700.4.7.1.x86_64.rpm">
          <filename>libvirt-nss-11.0.0-150700.4.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2030</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1750403044"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243117" id="1243117" title="VUL-0: CVE-2024-28956: xen: Intel CPU: Indirect Target Selection (ITS)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956" id="CVE-2024-28956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

Security fixes:

- CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117)

Other fixes:

- Upstream bug fixes (bsc#1027519)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.0_12" release="150700.3.3.1" arch="src" src="src/xen-4.20.0_12-150700.3.3.1.src.rpm">
          <filename>xen-4.20.0_12-150700.3.3.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen" epoch="0" version="4.20.0_12" release="150700.3.3.1" arch="x86_64" src="x86_64/xen-4.20.0_12-150700.3.3.1.x86_64.rpm">
          <filename>xen-4.20.0_12-150700.3.3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.0_12" release="150700.3.3.1" arch="x86_64" src="x86_64/xen-devel-4.20.0_12-150700.3.3.1.x86_64.rpm">
          <filename>xen-devel-4.20.0_12-150700.3.3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.0_12" release="150700.3.3.1" arch="x86_64" src="x86_64/xen-tools-4.20.0_12-150700.3.3.1.x86_64.rpm">
          <filename>xen-tools-4.20.0_12-150700.3.3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.0_12" release="150700.3.3.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.0_12-150700.3.3.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.0_12-150700.3.3.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2067</id>
    <title>Recommended update for vsftpd</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1750675902"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199250" id="1199250" title="vsftpd -- connection close followed by &quot;500 OOPS: priv_sock_get_cmd&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211301" id="1211301" title="crypto-policies: Extend the crypto-policies support for mozilla-nss, openjdk, krb5, bind, stunnel, openssh, libssh and more packages" type="bugzilla"/>
    </references>
    <description>This update for vsftpd fixes the following issues:

- Apply a patch to introduce the new
  internal PRIV_SOCK_QUIT command which vsftpd sends to privileged
  parent processes to properly shut down the TLS connection in case
  we've received QUIT from the session client. This change avoids
  misleading error messages in the servers log file. (bsc#1199250)
- Enable crypto-policies support: (bsc#1211301)
</description>
    <pkglist>
      <collection>
        <package name="vsftpd" epoch="0" version="3.0.5" release="150600.10.3.1" arch="src" src="src/vsftpd-3.0.5-150600.10.3.1.src.rpm">
          <filename>vsftpd-3.0.5-150600.10.3.1.src.rpm</filename>
        </package>
        <package name="vsftpd" epoch="0" version="3.0.5" release="150600.10.3.1" arch="x86_64" src="x86_64/vsftpd-3.0.5-150600.10.3.1.x86_64.rpm">
          <filename>vsftpd-3.0.5-150600.10.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4085</id>
    <title>Recommended update for openldap2_5</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762958371"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241901" id="1241901" title="upstream patch rollup (2.5.19)" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-13741" id="PED-13741" title="https://jira.suse.com/browse/PED-13741" type="jira"/>
    </references>
    <description>This update for openldap2_5 fixes the following issues:

Version update 2.5.20

- Enabling LTO objects for static libraries compilation.
- Upstream patch rollup (bsc#1241901).
- Re-enable libldapcpp for yast2-users.
- Add provides for openldap2-devel.

- added ppolicy-check-password module (jsc#PED-13741)
</description>
    <pkglist>
      <collection>
        <package name="openldap2_5" epoch="0" version="2.5.20+10" release="150500.11.35.1" arch="src" src="src/openldap2_5-2.5.20+10-150500.11.35.1.src.rpm">
          <filename>openldap2_5-2.5.20+10-150500.11.35.1.src.rpm</filename>
        </package>
        <package name="openldap2_5" epoch="0" version="2.5.20+10" release="150500.11.35.1" arch="x86_64" src="x86_64/openldap2_5-2.5.20+10-150500.11.35.1.x86_64.rpm">
          <filename>openldap2_5-2.5.20+10-150500.11.35.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2_5-contrib" epoch="0" version="2.5.20+10" release="150500.11.35.1" arch="x86_64" src="x86_64/openldap2_5-contrib-2.5.20+10-150500.11.35.1.x86_64.rpm">
          <filename>openldap2_5-contrib-2.5.20+10-150500.11.35.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2_5-ppolicy-check-password" epoch="0" version="2.5.20+10" release="150500.11.35.1" arch="x86_64" src="x86_64/openldap2_5-ppolicy-check-password-2.5.20+10-150500.11.35.1.x86_64.rpm">
          <filename>openldap2_5-ppolicy-check-password-2.5.20+10-150500.11.35.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2327</id>
    <title>Recommended update for sysstat</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752649574"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244553" id="1244553" title="sysstat systemd timers not enabled after upgrade to 15-SP6" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-12914" id="PED-12914" title="Determine whether the current readahead window tuning is appropriate for contemporary HW" type="jira"/>
    </references>
    <description>This update for sysstat fixes the following issues:

- Find command option -H added in /usr/lib64/sa/sa2.
- Automatically enable systemd timers upon installation (bsc#1244553).
- Determine whether the current readahead window tuning is appropriate
  for contemporary hardware(PED#12914).</description>
    <pkglist>
      <collection>
        <package name="sysstat" epoch="0" version="12.0.2" release="150000.3.45.3" arch="src" src="src/sysstat-12.0.2-150000.3.45.3.src.rpm">
          <filename>sysstat-12.0.2-150000.3.45.3.src.rpm</filename>
        </package>
        <package name="sysstat-isag" epoch="0" version="12.0.2" release="150000.3.45.3" arch="x86_64" src="x86_64/sysstat-isag-12.0.2-150000.3.45.3.x86_64.rpm">
          <filename>sysstat-isag-12.0.2-150000.3.45.3.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2301</id>
    <title>Recommended update for cyrus-sasl</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752486566"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229655" id="1229655" title="SLES support for TLS channel binding for the LDAP-backend of sssd" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-12097" id="PED-12097" title="https://jira.suse.com/browse/PED-12097" type="jira"/>
    </references>
    <description>This update for cyrus-sasl fixes the following issues:

- Add Channel Binding support for GSSAPI/GSS-SPNEGO (bsc#1229655, jsc#PED-12097)
- Add support for setting max ssf 0 to GSS-SPNEGO (bsc#1229655, jsc#PED-12097).</description>
    <pkglist>
      <collection>
        <package name="cyrus-sasl-bdb" epoch="0" version="2.1.28" release="150600.7.6.2" arch="src" src="src/cyrus-sasl-bdb-2.1.28-150600.7.6.2.src.rpm">
          <filename>cyrus-sasl-bdb-2.1.28-150600.7.6.2.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-bdb-devel" epoch="0" version="2.1.28" release="150600.7.6.2" arch="x86_64" src="x86_64/cyrus-sasl-bdb-devel-2.1.28-150600.7.6.2.x86_64.rpm">
          <filename>cyrus-sasl-bdb-devel-2.1.28-150600.7.6.2.x86_64.rpm</filename>
        </package>
        <package name="cyrus-sasl-saslauthd" epoch="0" version="2.1.28" release="150600.7.6.2" arch="src" src="src/cyrus-sasl-saslauthd-2.1.28-150600.7.6.2.src.rpm">
          <filename>cyrus-sasl-saslauthd-2.1.28-150600.7.6.2.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-sqlauxprop" epoch="0" version="2.1.28" release="150600.7.6.2" arch="x86_64" src="x86_64/cyrus-sasl-sqlauxprop-2.1.28-150600.7.6.2.x86_64.rpm">
          <filename>cyrus-sasl-sqlauxprop-2.1.28-150600.7.6.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2305</id>
    <title>Recommended update for nginx</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752491071"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243502" id="1243502" title="nginx always runs into &quot;timed out. Killing&quot; on shutdown when there are long-running processes" type="bugzilla"/>
    </references>
    <description>This update for nginx fixes the following issues:

- Changed service to prevent &quot;timed out. Killing&quot; messages
  on service stopping (bsc#1243502)
</description>
    <pkglist>
      <collection>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.6.1" arch="src" src="src/nginx-1.21.5-150600.10.6.1.src.rpm">
          <filename>nginx-1.21.5-150600.10.6.1.src.rpm</filename>
        </package>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.6.1" arch="x86_64" src="x86_64/nginx-1.21.5-150600.10.6.1.x86_64.rpm">
          <filename>nginx-1.21.5-150600.10.6.1.x86_64.rpm</filename>
        </package>
        <package name="nginx-source" epoch="0" version="1.21.5" release="150600.10.6.1" arch="noarch" src="noarch/nginx-source-1.21.5-150600.10.6.1.noarch.rpm">
          <filename>nginx-source-1.21.5-150600.10.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2063</id>
    <title>Recommended update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1750672941"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236329" id="1236329" title="Xen HVM domU: Populate-On-Demand domU takes long time to start, due to qemu regression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240157" id="1240157" title="[cockpit] virtual-machines - run imported qcow2 vm got internal error because of  'failed to find romfile efi-virtio.rom'" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- Fix the *-video-gpu-ccw package not being present in products:
  * [openSUSE] rpm/spec: go back to only Recommending -video-gpu-ccw for s390x
- Update to version 9.2.4:
  * target/hppa: Fix FPE exceptions
  * linux-user/hppa: Send proper si_code on SIGFPE exception
  * target/hppa: Copy instruction code into fr1 on FPU assist fault
  * migration: Allow caps to be set when preempt or multifd cap enabled
  * qapi/misc-target: Fix the doc to distinguish query-sgx and query-sgx-capabilities
  * hw/pci-host: Remove unused pci_host_data_be_ops
  * hw/pci-host/gt64120: Fix endianness handling
  * target/riscv/kvm: add kvm_csr_cfgs[]
  * target/riscv/kvm: turn kvm_riscv_reg_id_ulong() into a macro
  * target/riscv/kvm: turn u32/u64 reg functions into macros
  * target/riscv/kvm: fix leak in kvm_riscv_init_multiext_cfg()
  * target/riscv: Fix vslidedown with rvv_ta_all_1s
  * target/riscv: Fix the rvv reserved encoding of unmasked instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector indexed load/store instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector narrow/widen instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector integer extension instructions(OPMVV)
  * target/riscv: rvv: Apply vext_check_input_eew to vector slide instructions(OPIVI/OPIVX)
  * target/riscv: rvv: Apply vext_check_input_eew to OPIVV/OPFVV(vext_check_sss) instructions
  * target/riscv: rvv: Apply vext_check_input_eew to OPIVI/OPIVX/OPFVF(vext_check_ss) instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vrgather instructions to check mismatched input EEWs encoding constraint
  * target/riscv: rvv: Add CHECK arg to GEN_OPFVF_WIDEN_TRANS
  * target/riscv: rvv: Source vector registers cannot overlap mask register
  * common-user/host/riscv: use tail pseudoinstruction for calling tail
  * target/riscv: fix endless translation loop on big endian systems
  * target/riscv: pmp: move Smepmp operation conversion into a function
  * virtio: Call set_features during reset
  * s390x: Fix leak in machine_set_loadparm
  * 9pfs: fix FD leak and reduce latency of v9fs_reclaim_fd()
  * 9pfs: fix concurrent v9fs_reclaim_fd() calls
- all glib2 versions are recent enough to use pcre2:
  * qemu-linux-user: drop pcre (by Andreas Stieger)
- Correct wrong bug mentioned in changelog (bsc#1236329)
- Update to latest stable release (9.2.3)
  Fixes: bsc#1236329
  * hw/intc/aspeed: Fix IRQ handler mask check
  * hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  * target/riscv: fix handling of nop for vstart &gt;= vl in some vector instruction
  * target/riscv: refactor VSTART_CHECK_EARLY_EXIT() to accept vl as a parameter
  * Makefile: &quot;make dist&quot; generates a .xz, not .bz2
  * target/ppc: Fix e200 duplicate SPRs
  * target/ppc: Fix facility interrupt checks for VSX
  * ppc/spapr: fix default cpu for pre-9.0 machines.
  * host/include/loongarch64: Fix inline assembly compatibility with Clang
  * linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
  * target/riscv: fixes a bug against `ssamoswap` behavior in M-mode
  * target/riscv: fix access permission checks for CSR_SSP
  * docs/about/emulation: Fix broken link
  * vdpa: Allow vDPA to work on big-endian machine
  * vdpa: Fix endian bugs in shadow virtqueue
  * target/loongarch: Fix vldi inst
  * target/arm: Simplify pstate_sm check in sve_access_check
  * target/arm: Make DisasContext.{fp, sve}_access_checked tristate
  * util/cacheflush: Make first DSB unconditional on aarch64
  * docs: Rename default-configs to configs
  * block: Zero block driver state before reopening
  * hw/xen/hvm: Fix Aarch64 typo
  * hw/net/smc91c111: Don't allow data register access to overrun buffer
  * hw/net/smc91c111: Sanitize packet length on tx
  * hw/net/smc91c111: Sanitize packet numbers
  * ppc/pnv/occ: Fix common area sensor offsets
  * xen: No need to flush the mapcache for grants (bsc#1236329)
  * net: move backend cleanup to NIC cleanup
  * net: parameterize the removing client from nc list
  * util/qemu-timer.c: Don't warp timer from timerlist_rearm()
  * target/arm: Correct STRD atomicity
  * target/arm: Correct LDRD atomicity and fault behaviour
  * hw/arm: enable secure EL2 timers for sbsa machine
  * hw/arm: enable secure EL2 timers for virt machine
  * target/arm: Implement SEL2 physical and virtual timers
- [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.5.1" arch="src" src="src/qemu-9.2.4-150700.3.5.1.src.rpm">
          <filename>qemu-9.2.4-150700.3.5.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-alsa" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-audio-alsa-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-audio-alsa-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-dbus" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-audio-dbus-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-audio-dbus-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pa" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-audio-pa-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-audio-pa-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pipewire" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-audio-pipewire-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-audio-pipewire-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-audio-spice-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-audio-spice-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-block-curl-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-block-curl-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-block-iscsi-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-block-iscsi-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-nfs" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-block-nfs-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-block-nfs-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-block-rbd-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-block-rbd-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-block-ssh-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-block-ssh-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-baum" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-chardev-baum-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-chardev-baum-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-chardev-spice-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-chardev-spice-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-guest-agent-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-guest-agent-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-headless" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-headless-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-headless-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="9.2.4" release="150700.3.5.1" arch="noarch" src="noarch/qemu-ipxe-9.2.4-150700.3.5.1.noarch.rpm">
          <filename>qemu-ipxe-9.2.4-150700.3.5.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ksm-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ksm-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="9.2.4" release="150700.3.5.1" arch="noarch" src="noarch/qemu-lang-9.2.4-150700.3.5.1.noarch.rpm">
          <filename>qemu-lang-9.2.4-150700.3.5.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.5.1" arch="noarch" src="noarch/qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.5.1.noarch.rpm">
          <filename>qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.5.1.noarch.rpm</filename>
        </package>
        <package name="qemu-spice" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-spice-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-spice-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-curses" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-curses-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-curses-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-dbus" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-dbus-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-dbus-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-gtk" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-gtk-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-gtk-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-opengl-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-opengl-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-app" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-spice-app-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-spice-app-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.5.1" arch="noarch" src="noarch/qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.5.1.noarch.rpm">
          <filename>qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.5.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="9.2.4" release="150700.3.5.1" arch="x86_64" src="x86_64/qemu-x86-9.2.4-150700.3.5.1.x86_64.rpm">
          <filename>qemu-x86-9.2.4-150700.3.5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2133</id>
    <title>Recommended update for rmt-server</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1750940026"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236836" id="1236836" title="When registering SUMA ARM64 the repositories are missing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236600" id="1236600" title="Registration sharing fails due to system token being taken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237373" id="1237373" title="Error trying to read from 'plugin:/susecloud?credentials ... ' Failed to retrieve new repository metadata" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236816" id="1236816" title="Migration from Micro 5.5 to Micro 6.X fails due to product identifier change" type="bugzilla"/>
    </references>
    <description>This update for rmt-server contains the following fixes:

- Version 2.22
  * rmt-server-pubcloud:
    * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
    * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
    * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
    * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
    * Refactor and move verify_instance from ZypperAuth to InstanceVerification
    * Add system_token to regsharing to find the system (bsc#1236600)
    * Add system_token to system without one
    * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
    * Fix 500 errors (gh#1316, gh#1302)
    * Fix routing error(gh#1300)
    * Fix SUMA ARM64 (bsc#1236836)
    * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
    * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
    * Disable delta RPM mirroring by default (gh#1288)
    * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.
   </description>
    <pkglist>
      <collection>
        <package name="rmt-server" epoch="0" version="2.22" release="150700.3.3.1" arch="src" src="src/rmt-server-2.22-150700.3.3.1.src.rpm">
          <filename>rmt-server-2.22-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="rmt-server" epoch="0" version="2.22" release="150700.3.3.1" arch="x86_64" src="x86_64/rmt-server-2.22-150700.3.3.1.x86_64.rpm">
          <filename>rmt-server-2.22-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="rmt-server-config" epoch="0" version="2.22" release="150700.3.3.1" arch="x86_64" src="x86_64/rmt-server-config-2.22-150700.3.3.1.x86_64.rpm">
          <filename>rmt-server-config-2.22-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2431</id>
    <title>Security update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753097029"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243772" id="1243772" title="VUL-0: CVE-2025-48964: iputils: integer overflow in ping statistics via zero timestamp" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48964" id="CVE-2025-48964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48964" type="cve"/>
    </references>
    <description>This update for iputils fixes the following issues:

- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.22.1" arch="src" src="src/iputils-20211215-150400.3.22.1.src.rpm">
          <filename>iputils-20211215-150400.3.22.1.src.rpm</filename>
        </package>
        <package name="rarpd" epoch="0" version="20211215" release="150400.3.22.1" arch="x86_64" src="x86_64/rarpd-20211215-150400.3.22.1.x86_64.rpm">
          <filename>rarpd-20211215-150400.3.22.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2331</id>
    <title>Security update for erlang26</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752669287"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244642" id="1244642" title="VUL-0: CVE-2025-4748: erlang,erlang26: improper limitation of a pathname may lead to path traversal" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4748" id="CVE-2025-4748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4748" type="cve"/>
    </references>
    <description>This update for erlang26 fixes the following issues:

- CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)
</description>
    <pkglist>
      <collection>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.14.3" arch="src" src="src/erlang26-26.2.1-150300.7.14.3.src.rpm">
          <filename>erlang26-26.2.1-150300.7.14.3.src.rpm</filename>
        </package>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.14.3" arch="x86_64" src="x86_64/erlang26-26.2.1-150300.7.14.3.x86_64.rpm">
          <filename>erlang26-26.2.1-150300.7.14.3.x86_64.rpm</filename>
        </package>
        <package name="erlang26-epmd" epoch="0" version="26.2.1" release="150300.7.14.3" arch="x86_64" src="x86_64/erlang26-epmd-26.2.1-150300.7.14.3.x86_64.rpm">
          <filename>erlang26-epmd-26.2.1-150300.7.14.3.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2332</id>
    <title>Security update for erlang</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752669318"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244642" id="1244642" title="VUL-0: CVE-2025-4748: erlang,erlang26: improper limitation of a pathname may lead to path traversal" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4748" id="CVE-2025-4748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4748" type="cve"/>
    </references>
    <description>This update for erlang fixes the following issues:

- CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)
</description>
    <pkglist>
      <collection>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.23.3" arch="src" src="src/erlang-23.3.4.19-150300.3.23.3.src.rpm">
          <filename>erlang-23.3.4.19-150300.3.23.3.src.rpm</filename>
        </package>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.23.3" arch="x86_64" src="x86_64/erlang-23.3.4.19-150300.3.23.3.x86_64.rpm">
          <filename>erlang-23.3.4.19-150300.3.23.3.x86_64.rpm</filename>
        </package>
        <package name="erlang-epmd" epoch="0" version="23.3.4.19" release="150300.3.23.3" arch="x86_64" src="x86_64/erlang-epmd-23.3.4.19-150300.3.23.3.x86_64.rpm">
          <filename>erlang-epmd-23.3.4.19-150300.3.23.3.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2181</id>
    <title>Recommended update for ovmf</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1751349713"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243199" id="1243199" title="SVSM: [OVMF] Fix MSR register filtering for CAA MSR" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- OvmfPkg/CcExitLib: Use the proper register when filtering MSRs (bsc#1243199)
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.3.1" arch="src" src="src/ovmf-202408-150700.3.3.1.src.rpm">
          <filename>ovmf-202408-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.3.1" arch="x86_64" src="x86_64/ovmf-202408-150700.3.3.1.x86_64.rpm">
          <filename>ovmf-202408-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovmf-tools" epoch="0" version="202408" release="150700.3.3.1" arch="x86_64" src="x86_64/ovmf-tools-202408-150700.3.3.1.x86_64.rpm">
          <filename>ovmf-tools-202408-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202408" release="150700.3.3.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202408-150700.3.3.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202408-150700.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2570</id>
    <title>Recommended update for vsftpd</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753946694"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182473" id="1182473" title="vsftpd.conf references bugzilla.novell.com" type="bugzilla"/>
    </references>
    <description>This update for vsftpd fixes the following issues:

- adds a reference to our bug tracker to
  the installed vsftpd.conf. Updated that URL to point to the
  proper Bugzilla. (bsc#1182473)
</description>
    <pkglist>
      <collection>
        <package name="vsftpd" epoch="0" version="3.0.5" release="150600.10.6.1" arch="src" src="src/vsftpd-3.0.5-150600.10.6.1.src.rpm">
          <filename>vsftpd-3.0.5-150600.10.6.1.src.rpm</filename>
        </package>
        <package name="vsftpd" epoch="0" version="3.0.5" release="150600.10.6.1" arch="x86_64" src="x86_64/vsftpd-3.0.5-150600.10.6.1.x86_64.rpm">
          <filename>vsftpd-3.0.5-150600.10.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2346</id>
    <title>Recommended update for proftpd</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752751672"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244559" id="1244559" title="L3: proftpd crashes due to mod_tls.so not correct channel handling" type="bugzilla"/>
    </references>
    <description>This update for proftpd fixes the following issues:

- Fix a long-hidden bug in mod_sftp, where the list of GIDs for the logged-in user was not being appropriately 
  copied out of the session pool. This issue could potentially crash the proftpd server. (bsc#1244559)
</description>
    <pkglist>
      <collection>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="src" src="src/proftpd-1.3.8b-150600.13.9.1.src.rpm">
          <filename>proftpd-1.3.8b-150600.13.9.1.src.rpm</filename>
        </package>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-devel" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-devel-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-devel-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-doc" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-doc-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-doc-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-lang" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="noarch" src="noarch/proftpd-lang-1.3.8b-150600.13.9.1.noarch.rpm">
          <filename>proftpd-lang-1.3.8b-150600.13.9.1.noarch.rpm</filename>
        </package>
        <package name="proftpd-ldap" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-ldap-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-ldap-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-mysql" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-mysql-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-mysql-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-pgsql" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-pgsql-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-pgsql-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-radius" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-radius-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-radius-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-sqlite" epoch="0" version="1.3.8b" release="150600.13.9.1" arch="x86_64" src="x86_64/proftpd-sqlite-1.3.8b-150600.13.9.1.x86_64.rpm">
          <filename>proftpd-sqlite-1.3.8b-150600.13.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2550</id>
    <title>Recommended update for ovmf</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753868091"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245542" id="1245542" title="Kubevirt GPU passthrough failure" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205978" id="1205978" title="Got Page-Fault exception when VM is booting with edk2-stable202211 ovmf" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- Re-enabling 'dynamic mmio window size' feature in ovmf can support big GPU passthrough to guest. (bsc#1245542, bsc#1205978)
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.6.1" arch="src" src="src/ovmf-202408-150700.3.6.1.src.rpm">
          <filename>ovmf-202408-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.6.1" arch="x86_64" src="x86_64/ovmf-202408-150700.3.6.1.x86_64.rpm">
          <filename>ovmf-202408-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovmf-tools" epoch="0" version="202408" release="150700.3.6.1" arch="x86_64" src="x86_64/ovmf-tools-202408-150700.3.6.1.x86_64.rpm">
          <filename>ovmf-tools-202408-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202408" release="150700.3.6.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202408-150700.3.6.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202408-150700.3.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2315</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752584353"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-8907" id="PED-8907" title="https://jira.suse.com/browse/PED-8907" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246112" id="1246112" title="VUL-0: xen: More AMD transient execution attacks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244644" id="1244644" title="VUL-0: CVE-2025-27465: xen: x86: Incorrect stubs exception handling for flags recovery (XSA-470)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238896" id="1238896" title="VUL-0: AMD: More transient execution attacks" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27465" id="CVE-2025-27465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27465" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36357" id="CVE-2024-36357" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36357" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36350" id="CVE-2024-36350" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36350" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- Update to Xen 4.20.1
- CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471)
- CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.1_02" release="150700.3.8.1" arch="src" src="src/xen-4.20.1_02-150700.3.8.1.src.rpm">
          <filename>xen-4.20.1_02-150700.3.8.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen" epoch="0" version="4.20.1_02" release="150700.3.8.1" arch="x86_64" src="x86_64/xen-4.20.1_02-150700.3.8.1.x86_64.rpm">
          <filename>xen-4.20.1_02-150700.3.8.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.1_02" release="150700.3.8.1" arch="x86_64" src="x86_64/xen-devel-4.20.1_02-150700.3.8.1.x86_64.rpm">
          <filename>xen-devel-4.20.1_02-150700.3.8.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.1_02" release="150700.3.8.1" arch="x86_64" src="x86_64/xen-tools-4.20.1_02-150700.3.8.1.x86_64.rpm">
          <filename>xen-tools-4.20.1_02-150700.3.8.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.1_02" release="150700.3.8.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.1_02-150700.3.8.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.1_02-150700.3.8.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2925</id>
    <title>Recommended update for pgaudit</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1757576123"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246105" id="1246105" title="postgresql17-pgaudit is missing from SLES 15 SP6 and SP7" type="bugzilla"/>
    </references>
    <description>This update for pgaudit fixes the following issues:

Version updates for various versions.

- Fix issues related to 'pgaudit stack is not empty' errors.
- Stop building for EOL postgresql12.
- Added version 17 for postgresql 17.</description>
    <pkglist>
      <collection>
        <package name="postgresql17-pgaudit" epoch="0" version="17.1" release="150600.13.10.2" arch="src" src="src/postgresql17-pgaudit-17.1-150600.13.10.2.src.rpm">
          <filename>postgresql17-pgaudit-17.1-150600.13.10.2.src.rpm</filename>
        </package>
        <package name="postgresql17-pgaudit" epoch="0" version="17.1" release="150600.13.10.2" arch="x86_64" src="x86_64/postgresql17-pgaudit-17.1-150600.13.10.2.x86_64.rpm">
          <filename>postgresql17-pgaudit-17.1-150600.13.10.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2330</id>
    <title>Security update for rmt-server</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752664211"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242898" id="1242898" title="VUL-0: CVE-2025-32441: rmt-server: rack: Rack Session Reuse Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244166" id="1244166" title="registration 500 Internal Server Error shows TypeError (no implicit conversion of nil into String):" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242893" id="1242893" title="VUL-0: CVE-2025-46727: rmt-server: rack: Unbounded-Parameter DoS in Rack:QueryParser" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32441" id="CVE-2025-32441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32441" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46727" id="CVE-2025-46727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46727" type="cve"/>
    </references>
    <description>This update for rmt-server fixes the following issues:

- Update to version 2.23
- CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
- CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. (bsc#1242898)
</description>
    <pkglist>
      <collection>
        <package name="rmt-server" epoch="0" version="2.23" release="150700.3.6.1" arch="src" src="src/rmt-server-2.23-150700.3.6.1.src.rpm">
          <filename>rmt-server-2.23-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="rmt-server" epoch="0" version="2.23" release="150700.3.6.1" arch="x86_64" src="x86_64/rmt-server-2.23-150700.3.6.1.x86_64.rpm">
          <filename>rmt-server-2.23-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="rmt-server-config" epoch="0" version="2.23" release="150700.3.6.1" arch="x86_64" src="x86_64/rmt-server-config-2.23-150700.3.6.1.x86_64.rpm">
          <filename>rmt-server-config-2.23-150700.3.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2349</id>
    <title>Security update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1752752842"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40777" id="CVE-2025-40777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40777" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246548" id="1246548" title="VUL-0: EMBARGOED: CVE-2025-40777: bind: possible assertion failure when 'stale-answer-client-timeout' is set to '0'" type="bugzilla"/>
    </references>
    <description>This update for bind fixes the following issues:

- Upgrade to release 9.20.11
- CVE-2025-40777: Fixed a possible assertion failure when stale-answer-client-timeout is set to 0. (bsc#1246548)
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.11" release="150700.3.6.1" arch="src" src="src/bind-9.20.11-150700.3.6.1.src.rpm">
          <filename>bind-9.20.11-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.11" release="150700.3.6.1" arch="x86_64" src="x86_64/bind-9.20.11-150700.3.6.1.x86_64.rpm">
          <filename>bind-9.20.11-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.11" release="150700.3.6.1" arch="noarch" src="noarch/bind-doc-9.20.11-150700.3.6.1.noarch.rpm">
          <filename>bind-doc-9.20.11-150700.3.6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2561</id>
    <title>Recommended update for 389-ds</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753906980"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243428" id="1243428" title="L3: ns-slapd unable to recover database after disorderly shutdown" type="bugzilla"/>
    </references>
    <description>This update for 389-ds fixes the following issues:

- resolve infinite loop due when loading RUV entryrdn (bsc#1243428)
- lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
- Backend creation cleanup and Database UI tab error handling
- Improve paged result locking
- Synchronise accept_thread with slapd_daemon 
- RootDN Access Control Plugin with wildcards for IP addresses
- Exception thrown by dsconf instance repl get_ruv 
- Incorrect pwdpolicysubentry returned for an entry with user password policy
- Update concread to 0.5.6 
- Add a CI test 
- Password modify extended operation should skip password policy checks when executed by root DN
- Enabling audit log makes slapd coredump
- CI fails with Fedora 41 and DNF5
- Improve error message when bulk import connection is closed
- RFE - database compaction interval should be persistent
- Ignore replica busy condition in healthcheck 
- Add basic dsidm organizational unit tests
- Fix dsidm service get_dn option
- ns-slapd doesn't start in referral mode 
- statistics about index lookup report a wrong duration 
- Confusing error message from dsconf plugin set --enabled 
- lib389 get_db_lib function may returns the wrong db type 
- UI - schema editing and memberof shared config not working correctly
</description>
    <pkglist>
      <collection>
        <package name="389-ds" epoch="0" version="2.5.3~git107.a0bf348e0" release="150700.3.3.1" arch="src" src="src/389-ds-2.5.3~git107.a0bf348e0-150700.3.3.1.src.rpm">
          <filename>389-ds-2.5.3~git107.a0bf348e0-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="389-ds" epoch="0" version="2.5.3~git107.a0bf348e0" release="150700.3.3.1" arch="x86_64" src="x86_64/389-ds-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm">
          <filename>389-ds-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="389-ds-devel" epoch="0" version="2.5.3~git107.a0bf348e0" release="150700.3.3.1" arch="x86_64" src="x86_64/389-ds-devel-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm">
          <filename>389-ds-devel-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="lib389" epoch="0" version="2.5.3~git107.a0bf348e0" release="150700.3.3.1" arch="x86_64" src="x86_64/lib389-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm">
          <filename>lib389-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsvrcore0" epoch="0" version="2.5.3~git107.a0bf348e0" release="150700.3.3.1" arch="x86_64" src="x86_64/libsvrcore0-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm">
          <filename>libsvrcore0-2.5.3~git107.a0bf348e0-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2813</id>
    <title>Recommended update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1755262394"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246237" id="1246237" title="grub: test -f and -s do not work properly over the network (tftp,http)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246157" id="1246157" title="grub: test -f and -s do not work properly over the network (tftp,http)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246231" id="1246231" title="grub2: possible improvement for grub_find_device()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56738" id="CVE-2024-56738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56738" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234959" id="1234959" title="VUL-0: CVE-2024-56738: grub2: side-channel attack due to not constant-time algorithm in grub_crypto_memcmp" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2024-56738: Fixed side-channel attack due to not 
  constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

Other fixes:
- Fix test -f and -s do not work properly over the network files 
  served via tftp and http (bsc#1246157, bsc#1246237)
- Skip mount point in grub_find_device function (bsc#1246231)

</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.13.2" arch="src" src="src/grub2-2.12-150700.19.13.2.src.rpm">
          <filename>grub2-2.12-150700.19.13.2.src.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.13.2" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.13.2.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.13.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2594</id>
    <title>Security update for valkey</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1754061199"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48367" id="CVE-2025-48367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48367" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32023" id="CVE-2025-32023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32023" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246058" id="1246058" title="VUL-0: CVE-2025-48367: redis,redis7,valkey: unauthenticated connection causing repeated IP protocol erros can lead to client starvation and DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246059" id="1246059" title="VUL-0: CVE-2025-32023: redis,redis7,valkey: out-of-bounds write when working with HyperLogLog commands can lead to remote code execution" type="bugzilla"/>
    </references>
    <description>This update for valkey fixes the following issues:

- CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. (bsc#1246059)
- CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros that can lead to client starvation and DoS. (bsc#1246058)
</description>
    <pkglist>
      <collection>
        <package name="valkey" epoch="0" version="8.0.2" release="150700.3.8.1" arch="src" src="src/valkey-8.0.2-150700.3.8.1.src.rpm">
          <filename>valkey-8.0.2-150700.3.8.1.src.rpm</filename>
        </package>
        <package name="valkey" epoch="0" version="8.0.2" release="150700.3.8.1" arch="x86_64" src="x86_64/valkey-8.0.2-150700.3.8.1.x86_64.rpm">
          <filename>valkey-8.0.2-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="valkey-compat-redis" epoch="0" version="8.0.2" release="150700.3.8.1" arch="noarch" src="noarch/valkey-compat-redis-8.0.2-150700.3.8.1.noarch.rpm">
          <filename>valkey-compat-redis-8.0.2-150700.3.8.1.noarch.rpm</filename>
        </package>
        <package name="valkey-devel" epoch="0" version="8.0.2" release="150700.3.8.1" arch="x86_64" src="x86_64/valkey-devel-8.0.2-150700.3.8.1.x86_64.rpm">
          <filename>valkey-devel-8.0.2-150700.3.8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2682</id>
    <title>Security update for apache2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1754319963"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43204" id="CVE-2024-43204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47252" id="CVE-2024-47252" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47252" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42516" id="CVE-2024-42516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49630" id="CVE-2025-49630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53020" id="CVE-2025-53020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49812" id="CVE-2025-49812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49812" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23048" id="CVE-2025-23048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23048" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246477" id="1246477" title="VUL-0: CVE-2024-42516: apache2: HTTP response splitting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246302" id="1246302" title="VUL-0: CVE-2025-23048: apache2: access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246307" id="1246307" title="VUL-0: CVE-2025-49630: apache2: denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246303" id="1246303" title="VUL-0: CVE-2024-47252: apache2: insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246306" id="1246306" title="VUL-0: CVE-2025-53020: apache2: HTTP/2 denial of service due to late release of memory after effective lifetime" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246169" id="1246169" title="VUL-0: CVE-2025-49812: apache2: Opossum Attack Application Layer Desynchronization using Opportunistic TLS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246305" id="1246305" title="VUL-0: CVE-2024-43204: apache2: SSRF when mod_proxy is loaded allows an attacker to send outbound proxy requests to a URL controlled by them" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477)
- CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305)
- CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303)
- CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302)
- CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307)
- CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169)
- CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)
</description>
    <pkglist>
      <collection>
        <package name="apache2" epoch="0" version="2.4.51" release="150400.6.46.1" arch="src" src="src/apache2-2.4.51-150400.6.46.1.src.rpm">
          <filename>apache2-2.4.51-150400.6.46.1.src.rpm</filename>
        </package>
        <package name="apache2-doc" epoch="0" version="2.4.51" release="150400.6.46.1" arch="noarch" src="noarch/apache2-doc-2.4.51-150400.6.46.1.noarch.rpm">
          <filename>apache2-doc-2.4.51-150400.6.46.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2685</id>
    <title>Security update for apache2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1754320094"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43204" id="CVE-2024-43204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42516" id="CVE-2024-42516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47252" id="CVE-2024-47252" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47252" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53020" id="CVE-2025-53020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53020" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23048" id="CVE-2025-23048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23048" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49630" id="CVE-2025-49630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49630" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49812" id="CVE-2025-49812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49812" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246305" id="1246305" title="VUL-0: CVE-2024-43204: apache2: SSRF when mod_proxy is loaded allows an attacker to send outbound proxy requests to a URL controlled by them" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246477" id="1246477" title="VUL-0: CVE-2024-42516: apache2: HTTP response splitting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246303" id="1246303" title="VUL-0: CVE-2024-47252: apache2: insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246306" id="1246306" title="VUL-0: CVE-2025-53020: apache2: HTTP/2 denial of service due to late release of memory after effective lifetime" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246169" id="1246169" title="VUL-0: CVE-2025-49812: apache2: Opossum Attack Application Layer Desynchronization using Opportunistic TLS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246307" id="1246307" title="VUL-0: CVE-2025-49630: apache2: denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246302" id="1246302" title="VUL-0: CVE-2025-23048: apache2: access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477)
- CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305)
- CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303)
- CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302)
- CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307)
- CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169)
- CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)
</description>
    <pkglist>
      <collection>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.3.1" arch="src" src="src/apache2-devel-2.4.62-150700.4.3.1.src.rpm">
          <filename>apache2-devel-2.4.62-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.3.1" arch="x86_64" src="x86_64/apache2-devel-2.4.62-150700.4.3.1.x86_64.rpm">
          <filename>apache2-devel-2.4.62-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.3.1" arch="src" src="src/apache2-utils-2.4.62-150700.4.3.1.src.rpm">
          <filename>apache2-utils-2.4.62-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.3.1" arch="x86_64" src="x86_64/apache2-utils-2.4.62-150700.4.3.1.x86_64.rpm">
          <filename>apache2-utils-2.4.62-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.3.1" arch="src" src="src/apache2-worker-2.4.62-150700.4.3.1.src.rpm">
          <filename>apache2-worker-2.4.62-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.3.1" arch="x86_64" src="x86_64/apache2-worker-2.4.62-150700.4.3.1.x86_64.rpm">
          <filename>apache2-worker-2.4.62-150700.4.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2582</id>
    <title>Recommended update for proftpd</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753971576"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246853" id="1246853" title="L3: /usr/lib64/proftpd/mod_sftp.so is missing in proftpd-1.3.8b-150600.13.6" type="bugzilla"/>
    </references>
    <description>This update for proftpd fixes the following issues:

- The previously applied patch broke the build such that mod_sftp.so was no longer installed.
  This change updates the patch to remedy that issue. ([bsc#1246853)
</description>
    <pkglist>
      <collection>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="src" src="src/proftpd-1.3.8b-150600.13.12.1.src.rpm">
          <filename>proftpd-1.3.8b-150600.13.12.1.src.rpm</filename>
        </package>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-devel" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-devel-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-devel-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-doc" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-doc-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-doc-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-lang" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="noarch" src="noarch/proftpd-lang-1.3.8b-150600.13.12.1.noarch.rpm">
          <filename>proftpd-lang-1.3.8b-150600.13.12.1.noarch.rpm</filename>
        </package>
        <package name="proftpd-ldap" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-ldap-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-ldap-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-mysql" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-mysql-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-mysql-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-pgsql" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-pgsql-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-pgsql-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-radius" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-radius-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-radius-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-sqlite" epoch="0" version="1.3.8b" release="150600.13.12.1" arch="x86_64" src="x86_64/proftpd-sqlite-1.3.8b-150600.13.12.1.x86_64.rpm">
          <filename>proftpd-sqlite-1.3.8b-150600.13.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2549</id>
    <title>Recommended update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1753866564"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246566" id="1246566" title="kubevirt unable to passthrough multiple GPUs in bios mode" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- [roms] seabios: include &quot;pciinit: don't misalign large BARs&quot; (bsc#1246566)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.8.1" arch="src" src="src/qemu-9.2.4-150700.3.8.1.src.rpm">
          <filename>qemu-9.2.4-150700.3.8.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-alsa" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-audio-alsa-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-audio-alsa-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-dbus" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-audio-dbus-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-audio-dbus-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pa" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-audio-pa-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-audio-pa-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pipewire" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-audio-pipewire-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-audio-pipewire-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-audio-spice-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-audio-spice-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-block-curl-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-block-curl-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-block-iscsi-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-block-iscsi-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-nfs" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-block-nfs-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-block-nfs-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-block-rbd-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-block-rbd-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-block-ssh-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-block-ssh-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-baum" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-chardev-baum-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-chardev-baum-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-chardev-spice-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-chardev-spice-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-guest-agent-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-guest-agent-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-headless" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-headless-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-headless-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="9.2.4" release="150700.3.8.1" arch="noarch" src="noarch/qemu-ipxe-9.2.4-150700.3.8.1.noarch.rpm">
          <filename>qemu-ipxe-9.2.4-150700.3.8.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ksm-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ksm-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="9.2.4" release="150700.3.8.1" arch="noarch" src="noarch/qemu-lang-9.2.4-150700.3.8.1.noarch.rpm">
          <filename>qemu-lang-9.2.4-150700.3.8.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.8.1" arch="noarch" src="noarch/qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.8.1.noarch.rpm">
          <filename>qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.8.1.noarch.rpm</filename>
        </package>
        <package name="qemu-spice" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-spice-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-spice-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-curses" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-curses-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-curses-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-dbus" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-dbus-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-dbus-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-gtk" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-gtk-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-gtk-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-opengl-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-opengl-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-app" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-spice-app-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-spice-app-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.8.1" arch="noarch" src="noarch/qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.8.1.noarch.rpm">
          <filename>qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.8.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="9.2.4" release="150700.3.8.1" arch="x86_64" src="x86_64/qemu-x86-9.2.4-150700.3.8.1.x86_64.rpm">
          <filename>qemu-x86-9.2.4-150700.3.8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2941</id>
    <title>Recommended update for mariadb</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1755768216"/>
    <references/>
    <description>This update for mariadb fixes the following issues:

- Update to 11.8.2:
    https://mariadb.com/kb/en/mariadb-11-8-2-release-notes/
    https://mariadb.com/kb/en/mariadb-11-8-2-changelog/
- Update list of skipped tests
</description>
    <pkglist>
      <collection>
        <package name="libmariadbd-devel" epoch="0" version="11.8.2" release="150700.3.3.1" arch="x86_64" src="x86_64/libmariadbd-devel-11.8.2-150700.3.3.1.x86_64.rpm">
          <filename>libmariadbd-devel-11.8.2-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libmariadbd19" epoch="0" version="11.8.2" release="150700.3.3.1" arch="x86_64" src="x86_64/libmariadbd19-11.8.2-150700.3.3.1.x86_64.rpm">
          <filename>libmariadbd19-11.8.2-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.2" release="150700.3.3.1" arch="src" src="src/mariadb-11.8.2-150700.3.3.1.src.rpm">
          <filename>mariadb-11.8.2-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.2" release="150700.3.3.1" arch="x86_64" src="x86_64/mariadb-11.8.2-150700.3.3.1.x86_64.rpm">
          <filename>mariadb-11.8.2-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-client" epoch="0" version="11.8.2" release="150700.3.3.1" arch="x86_64" src="x86_64/mariadb-client-11.8.2-150700.3.3.1.x86_64.rpm">
          <filename>mariadb-client-11.8.2-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-errormessages" epoch="0" version="11.8.2" release="150700.3.3.1" arch="noarch" src="noarch/mariadb-errormessages-11.8.2-150700.3.3.1.noarch.rpm">
          <filename>mariadb-errormessages-11.8.2-150700.3.3.1.noarch.rpm</filename>
        </package>
        <package name="mariadb-tools" epoch="0" version="11.8.2" release="150700.3.3.1" arch="x86_64" src="x86_64/mariadb-tools-11.8.2-150700.3.3.1.x86_64.rpm">
          <filename>mariadb-tools-11.8.2-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3054</id>
    <title>Recommended update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1756876656"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-13221" id="PED-13221" title="https://jira.suse.com/browse/PED-13221" type="jira"/>
    </references>
    <description>This update for openvswitch fixes the following issues:

- Renamed python{3,311}-ovs to python{3,311}-openvswitch for distribution consistency. (jsc#PED-13221)
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_5-0" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/libopenvswitch-3_5-0-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>libopenvswitch-3_5-0-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="libovn-25_03-0" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/libovn-25_03-0-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>libovn-25_03-0-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.0" release="150700.41.3.1" arch="src" src="src/openvswitch-3.5.0-150700.41.3.1.src.rpm">
          <filename>openvswitch-3.5.0-150700.41.3.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-devel" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-devel-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-devel-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-ipsec" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-ipsec-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-ipsec-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-pki" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-pki-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-pki-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-test" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-test-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-test-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-vtep" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/openvswitch-vtep-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>openvswitch-vtep-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-central" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-central-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-central-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-devel" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-devel-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-devel-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-docker" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-docker-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-docker-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-host" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-host-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-host-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-vtep" epoch="0" version="25.03.0" release="150700.41.3.1" arch="x86_64" src="x86_64/ovn-vtep-25.03.0-150700.41.3.1.x86_64.rpm">
          <filename>ovn-vtep-25.03.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-openvswitch" epoch="0" version="3.5.0" release="150700.41.3.1" arch="x86_64" src="x86_64/python3-openvswitch-3.5.0-150700.41.3.1.x86_64.rpm">
          <filename>python3-openvswitch-3.5.0-150700.41.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3039</id>
    <title>Recommended update for nginx</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1756735002"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246090" id="1246090" title="VUL-0: nginx: bad logrotate configuration allows potential escalation from nginx to root" type="bugzilla"/>
    </references>
    <description>This update for nginx fixes the following issues:

- Drop root priviledges while running logrotate (bsc#1246090)
</description>
    <pkglist>
      <collection>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.9.1" arch="src" src="src/nginx-1.21.5-150600.10.9.1.src.rpm">
          <filename>nginx-1.21.5-150600.10.9.1.src.rpm</filename>
        </package>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.9.1" arch="x86_64" src="x86_64/nginx-1.21.5-150600.10.9.1.x86_64.rpm">
          <filename>nginx-1.21.5-150600.10.9.1.x86_64.rpm</filename>
        </package>
        <package name="nginx-source" epoch="0" version="1.21.5" release="150600.10.9.1" arch="noarch" src="noarch/nginx-source-1.21.5-150600.10.9.1.noarch.rpm">
          <filename>nginx-source-1.21.5-150600.10.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2769</id>
    <title>Security update for amber-cli</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1755006579"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1047218" id="1047218" title="trackerbug: packages do not build reproducibly from including build time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240511" id="1240511" title="VUL-0: CVE-2025-30204: amber-cli: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204" id="CVE-2025-30204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204" type="cve"/>
    </references>
    <description>This update for amber-cli fixes the following issues:

- Update to version 1.13.1+git20250329.c2e3bb8:
  * CVE-2025-30204: Fixed jwt-go excessive memory 
    allocation during header parsing (bsc#1240511)
  * jwt version upgrade (#174)
  * Update policy size limit to 20k (#173)
  * Update tenant user model with latest changes (#172)
  * Fix/workflow (#171)
  * Upgrade GO version to 1.23.6 (#170)
  * Update golang jwt dependency (#169)
  * Update TMS roles struct (#167)
  * Update jwt dependency version (#165)
  * Add changes to support JWT (#163)
  * Update roles struct to be in sync with TMS (#164)
  * go upgrade to 1.22.7 (#162)
  * CASSINI-22266: Added permissions in ci workflow files (#153)
  * Add check for missing Security.md file (#150)
  * Go version upgrade to 1.22.5 (#148)
  * CLI changes (#140)
  * Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#147)
  * Update product model to include multiple plan IDs (#146)
  * Updated the help section (#145)
  * Mark policy type field as not required (#144)
  * Upgrade/goversion 1.22.3 (#143)
  * Remove policy type and attestation type check for policy creation (#142)
  * Go version upgrade  1.22.2 (#141)
  * Fix error message to include the correct set of characters (#138)
  * UT coverage 80.9% (#137)
  * Fix push installer workflow (#136)
  * 3rd party versions upgrade (#133)
  * GO version upgrade to 1.22.0 (#132)
  * Fix/go version 1.21.6 (#127)
  * Update API key validation regex as per latest changes (#125)
  * Update API key validation regex as per latest changes (#124)
  * dependency version upgrade (#123)
  * Update tag create model (#121)
  * CASSINI-10113: Add scans in CI (#99)
  * corrected minor check condition (#120)
  * Add check to validate env variable before setting (#119)
  * Add version-check script (#118)
  * Add file path check for invalid characters (#116)
  * Update compoenent version (#117)
  * Update README as per suggestions (#113) (#115)
  * Added HTTP scheme validation to avoid API Key leakage (#108)
  * CASSINI-10987 Golang version upgrade to 1.21.4 (#114)
  * Update policy model as per the latest changes (#109)
  * Remove branch info from on schedule (#106)
  * Add BDBA scan to CI (#104)
  * Update CLI URL (#105)
  * updated licenses (#102)
  * Updated version of all components to v1.0.0 for GA (#100)
  * Validate the email id input before requesting list of users (#98)
  * Remove redundant print statements (#97)
  * Request ID and trace ID should be visible on the console for errors as well (#96)
  * Update sample policy as per token profile update changes (#95)
  * Update CLI name from tenantclt to inteltrustauthority (#93)
  * Update the headers for request and trace id (#94)
  * cassini-9466-Go version update to 1.20.6 (#91)
  * Add retry logic to client in tenant CLI (#92)
  * Add request-id optional parameter for each command (#90)

- Override build date with SOURCE_DATE_EPOCH (bsc#1047218)
</description>
    <pkglist>
      <collection>
        <package name="amber-cli" epoch="0" version="1.13.1+git20250329.c2e3bb8" release="150600.3.3.1" arch="src" src="src/amber-cli-1.13.1+git20250329.c2e3bb8-150600.3.3.1.src.rpm">
          <filename>amber-cli-1.13.1+git20250329.c2e3bb8-150600.3.3.1.src.rpm</filename>
        </package>
        <package name="amber-cli" epoch="0" version="1.13.1+git20250329.c2e3bb8" release="150600.3.3.1" arch="x86_64" src="x86_64/amber-cli-1.13.1+git20250329.c2e3bb8-150600.3.3.1.x86_64.rpm">
          <filename>amber-cli-1.13.1+git20250329.c2e3bb8-150600.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3072</id>
    <title>Recommended update for sysstat</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1756970508"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244553" id="1244553" title="EMU: L3: sysstat systemd timers not enabled after upgrade to 15-SP6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246852" id="1246852" title="sysstat: Leap 15.6 update to sysstat-12.0.2-150000.3.45.3 broken and gives error messages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246835" id="1246835" title="L3: sysstat update stops data collection on SLES15SP4 LTSS" type="bugzilla"/>
    </references>
    <description>This update for sysstat fixes the following issues:

- Renaming services to allow preset in systemd-presets-branding-SLE to work
  (bsc#1244553, bsc#1246835).
- Fix argument order of find (bsc#1246852).
- Fix systemd timers that are not enabled after upgrade (bsc#1244553).
- deleted 90-sysstat.preset file, not needed anymore.</description>
    <pkglist>
      <collection>
        <package name="sysstat" epoch="0" version="12.0.2" release="150000.3.48.3" arch="src" src="src/sysstat-12.0.2-150000.3.48.3.src.rpm">
          <filename>sysstat-12.0.2-150000.3.48.3.src.rpm</filename>
        </package>
        <package name="sysstat-isag" epoch="0" version="12.0.2" release="150000.3.48.3" arch="x86_64" src="x86_64/sysstat-isag-12.0.2-150000.3.48.3.x86_64.rpm">
          <filename>sysstat-isag-12.0.2-150000.3.48.3.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3234</id>
    <title>Security update for rabbitmq-server313</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1757942621"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246091" id="1246091" title="VUL-0: rabbitmq-server: bad logrotate configuration allows potential escalation from rabbitmq to root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245105" id="1245105" title="VUL-0: CVE-2025-50200: rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP request" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50200" id="CVE-2025-50200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50200" type="cve"/>
    </references>
    <description>This update for rabbitmq-server313 fixes the following issues:

- CVE-2025-50200: Fixed logging of Basic Auth header from an HTTP request 
  (bsc#1245105)
- Fixed bad logrotate configuration allowing potential escalation from 
  rabbitmq to root (bsc#1246091)
  </description>
    <pkglist>
      <collection>
        <package name="erlang-rabbitmq-client313" epoch="0" version="3.13.1" release="150600.13.11.1" arch="x86_64" src="x86_64/erlang-rabbitmq-client313-3.13.1-150600.13.11.1.x86_64.rpm">
          <filename>erlang-rabbitmq-client313-3.13.1-150600.13.11.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313" epoch="0" version="3.13.1" release="150600.13.11.1" arch="src" src="src/rabbitmq-server313-3.13.1-150600.13.11.1.src.rpm">
          <filename>rabbitmq-server313-3.13.1-150600.13.11.1.src.rpm</filename>
        </package>
        <package name="rabbitmq-server313" epoch="0" version="3.13.1" release="150600.13.11.1" arch="x86_64" src="x86_64/rabbitmq-server313-3.13.1-150600.13.11.1.x86_64.rpm">
          <filename>rabbitmq-server313-3.13.1-150600.13.11.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313-bash-completion" epoch="0" version="3.13.1" release="150600.13.11.1" arch="noarch" src="noarch/rabbitmq-server313-bash-completion-3.13.1-150600.13.11.1.noarch.rpm">
          <filename>rabbitmq-server313-bash-completion-3.13.1-150600.13.11.1.noarch.rpm</filename>
        </package>
        <package name="rabbitmq-server313-plugins" epoch="0" version="3.13.1" release="150600.13.11.1" arch="x86_64" src="x86_64/rabbitmq-server313-plugins-3.13.1-150600.13.11.1.x86_64.rpm">
          <filename>rabbitmq-server313-plugins-3.13.1-150600.13.11.1.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server313-zsh-completion" epoch="0" version="3.13.1" release="150600.13.11.1" arch="noarch" src="noarch/rabbitmq-server313-zsh-completion-3.13.1-150600.13.11.1.noarch.rpm">
          <filename>rabbitmq-server313-zsh-completion-3.13.1-150600.13.11.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3841</id>
    <title>Recommended update for ibmtss</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761664822"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239985" id="1239985" title="ibmtss seems to ship policies/ directory with test certs/keys" type="bugzilla"/>
    </references>
    <description>This update for ibmtss fixes the following issue:

- Remove test certs, keys, data (bsc#1239985).</description>
    <pkglist>
      <collection>
        <package name="ibmtss" epoch="0" version="2.4.0" release="150700.4.3.2" arch="src" src="src/ibmtss-2.4.0-150700.4.3.2.src.rpm">
          <filename>ibmtss-2.4.0-150700.4.3.2.src.rpm</filename>
        </package>
        <package name="ibmtss" epoch="0" version="2.4.0" release="150700.4.3.2" arch="x86_64" src="x86_64/ibmtss-2.4.0-150700.4.3.2.x86_64.rpm">
          <filename>ibmtss-2.4.0-150700.4.3.2.x86_64.rpm</filename>
        </package>
        <package name="ibmtss-base" epoch="0" version="2.4.0" release="150700.4.3.2" arch="noarch" src="noarch/ibmtss-base-2.4.0-150700.4.3.2.noarch.rpm">
          <filename>ibmtss-base-2.4.0-150700.4.3.2.noarch.rpm</filename>
        </package>
        <package name="ibmtss-devel" epoch="0" version="2.4.0" release="150700.4.3.2" arch="x86_64" src="x86_64/ibmtss-devel-2.4.0-150700.4.3.2.x86_64.rpm">
          <filename>ibmtss-devel-2.4.0-150700.4.3.2.x86_64.rpm</filename>
        </package>
        <package name="libibmtss2" epoch="0" version="2.4.0" release="150700.4.3.2" arch="x86_64" src="x86_64/libibmtss2-2.4.0-150700.4.3.2.x86_64.rpm">
          <filename>libibmtss2-2.4.0-150700.4.3.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3296</id>
    <title>Recommended update for oracleasm</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1758557826"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235682" id="1235682" title="oracleasm memory reclaimation not working" type="bugzilla"/>
    </references>
    <description>This update for oracleasm fixes the following issues:

- Add support for per-I/O block size selection
- Fix oracleasm memory reclaimation not working (bsc#1235682).</description>
    <pkglist>
      <collection>
        <package name="oracleasm" epoch="0" version="2.0.8" release="150700.22.3.2" arch="src" src="src/oracleasm-2.0.8-150700.22.3.2.src.rpm">
          <filename>oracleasm-2.0.8-150700.22.3.2.src.rpm</filename>
        </package>
        <package name="oracleasm-kmp-default" epoch="0" version="2.0.8_k6.4.0_150700.53.6" release="150700.22.3.2" arch="x86_64" src="x86_64/oracleasm-kmp-default-2.0.8_k6.4.0_150700.53.6-150700.22.3.2.x86_64.rpm">
          <filename>oracleasm-kmp-default-2.0.8_k6.4.0_150700.53.6-150700.22.3.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3895</id>
    <title>Recommended update for openCryptoki</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761921184"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248002" id="1248002" title="opencryptoki doesnt work in FIPS mode" type="bugzilla"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

- ocki, remove the use of MD5, it doesn't work in FIPS mode (bsc#1248002).
- Added riscv64 to openCryptoki_64bit_arch</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.24.0" release="150700.5.3.2" arch="src" src="src/openCryptoki-3.24.0-150700.5.3.2.src.rpm">
          <filename>openCryptoki-3.24.0-150700.5.3.2.src.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.24.0" release="150700.5.3.2" arch="x86_64" src="x86_64/openCryptoki-3.24.0-150700.5.3.2.x86_64.rpm">
          <filename>openCryptoki-3.24.0-150700.5.3.2.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-64bit" epoch="0" version="3.24.0" release="150700.5.3.2" arch="x86_64" src="x86_64/openCryptoki-64bit-3.24.0-150700.5.3.2.x86_64.rpm">
          <filename>openCryptoki-64bit-3.24.0-150700.5.3.2.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-devel" epoch="0" version="3.24.0" release="150700.5.3.2" arch="x86_64" src="x86_64/openCryptoki-devel-3.24.0-150700.5.3.2.x86_64.rpm">
          <filename>openCryptoki-devel-3.24.0-150700.5.3.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3005</id>
    <title>Security update for postgresql16</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1757586120"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8714" id="CVE-2025-8714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8714" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8713" id="CVE-2025-8713" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8713" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8715" id="CVE-2025-8715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8715" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248119" id="1248119" title="VUL-0: CVE-2025-8715: postgresql: improper neutralization of newlines in pg_dump can lead to arbitrary code execution in the psql client and in the restore target server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248122" id="1248122" title="VUL-0: CVE-2025-8714: postgresql: untrusted data inclusion in pg_dump allows superuser of origin server to execute arbitrary code in psql client" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248120" id="1248120" title="VUL-0: CVE-2025-8713: postgresql: optimizer statistics can expose sampled data within a view, partition, or child table to unauthorized users" type="bugzilla"/>
    </references>
    <description>This update for postgresql16 fixes the following issues:

Upgraded to 16.10:
  * CVE-2025-8713: Fixed optimizer statistics exposing
    sampled data within a view, partition, or child table
    (bsc#1248120)
  * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump 
    allows superuser of origin server to execute arbitrary code
    in psql client (bsc#1248122)
  * CVE-2025-8715: Fixed improper neutralization of newlines 
    in pg_dump leading to arbitrary code execution in the psql
    client and in the restore target server (bsc#1248119)
</description>
    <pkglist>
      <collection>
        <package name="postgresql16" epoch="0" version="16.10" release="150600.16.21.1" arch="src" src="src/postgresql16-16.10-150600.16.21.1.src.rpm">
          <filename>postgresql16-16.10-150600.16.21.1.src.rpm</filename>
        </package>
        <package name="postgresql16" epoch="0" version="16.10" release="150600.16.21.1" arch="x86_64" src="x86_64/postgresql16-16.10-150600.16.21.1.x86_64.rpm">
          <filename>postgresql16-16.10-150600.16.21.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server" epoch="0" version="16.10" release="150600.16.21.1" arch="x86_64" src="x86_64/postgresql16-server-16.10-150600.16.21.1.x86_64.rpm">
          <filename>postgresql16-server-16.10-150600.16.21.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server-devel" epoch="0" version="16.10" release="150600.16.21.1" arch="x86_64" src="x86_64/postgresql16-server-devel-16.10-150600.16.21.1.x86_64.rpm">
          <filename>postgresql16-server-devel-16.10-150600.16.21.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-2986</id>
    <title>Security update for postgresql17</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1756204896"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8715" id="CVE-2025-8715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8715" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8714" id="CVE-2025-8714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8714" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8713" id="CVE-2025-8713" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8713" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248119" id="1248119" title="VUL-0: CVE-2025-8715: postgresql: improper neutralization of newlines in pg_dump can lead to arbitrary code execution in the psql client and in the restore target server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248120" id="1248120" title="VUL-0: CVE-2025-8713: postgresql: optimizer statistics can expose sampled data within a view, partition, or child table to unauthorized users" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248122" id="1248122" title="VUL-0: CVE-2025-8714: postgresql: untrusted data inclusion in pg_dump allows superuser of origin server to execute arbitrary code in psql client" type="bugzilla"/>
    </references>
    <description>This update for postgresql17 fixes the following issues:

Updated to 17.6:
  * CVE-2025-8713: Fixed optimizer statistics exposing
    sampled data within a view, partition, or child table
    (bsc#1248120)
  * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump 
    allows superuser of origin server to execute arbitrary code
    in psql client (bsc#1248122)
  * CVE-2025-8715: Fixed improper neutralization of newlines 
    in pg_dump leading to arbitrary code execution in the psql
    client and in the restore target server (bsc#1248119)
</description>
    <pkglist>
      <collection>
        <package name="libecpg6" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/libecpg6-17.6-150600.13.16.1.x86_64.rpm">
          <filename>libecpg6-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17" epoch="0" version="17.6" release="150600.13.16.1" arch="src" src="src/postgresql17-17.6-150600.13.16.1.src.rpm">
          <filename>postgresql17-17.6-150600.13.16.1.src.rpm</filename>
        </package>
        <package name="postgresql17-contrib" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-contrib-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-contrib-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-devel" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-devel-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-devel-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-docs" epoch="0" version="17.6" release="150600.13.16.1" arch="noarch" src="noarch/postgresql17-docs-17.6-150600.13.16.1.noarch.rpm">
          <filename>postgresql17-docs-17.6-150600.13.16.1.noarch.rpm</filename>
        </package>
        <package name="postgresql17-plperl" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-plperl-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-plperl-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-plpython" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-plpython-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-plpython-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pltcl" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-pltcl-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-pltcl-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-server-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-server-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server-devel" epoch="0" version="17.6" release="150600.13.16.1" arch="x86_64" src="x86_64/postgresql17-server-devel-17.6-150600.13.16.1.x86_64.rpm">
          <filename>postgresql17-server-devel-17.6-150600.13.16.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3422</id>
    <title>Security update for apache2-mod_security2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759135838"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54571" id="CVE-2025-54571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54571" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247674" id="1247674" title="VUL-0: CVE-2025-54571: apache2-mod_security2: Insufficient Return Value Handling on ModSecurity leads to XSS and Source Code Disclosure" type="bugzilla"/>
    </references>
    <description>This update for apache2-mod_security2 fixes the following issues:

- CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure (bsc#1247674)
</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_security2" epoch="0" version="2.9.4" release="150400.3.12.1" arch="src" src="src/apache2-mod_security2-2.9.4-150400.3.12.1.src.rpm">
          <filename>apache2-mod_security2-2.9.4-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="apache2-mod_security2" epoch="0" version="2.9.4" release="150400.3.12.1" arch="x86_64" src="x86_64/apache2-mod_security2-2.9.4-150400.3.12.1.x86_64.rpm">
          <filename>apache2-mod_security2-2.9.4-150400.3.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3306</id>
    <title>Security update for sevctl</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1758633224"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" id="CVE-2024-12224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243860" id="1243860" title="VUL-0: CVE-2024-12224: sevctl: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242618" id="1242618" title="VUL-0: CVE-2025-3416: sevctl: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate" type="bugzilla"/>
    </references>
    <description>This update for sevctl fixes the following issues:

- CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243860) 
- CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch (bsc#1242618)
</description>
    <pkglist>
      <collection>
        <package name="sevctl" epoch="0" version="0.6.0" release="150700.3.3.1" arch="src" src="src/sevctl-0.6.0-150700.3.3.1.src.rpm">
          <filename>sevctl-0.6.0-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="sevctl" epoch="0" version="0.6.0" release="150700.3.3.1" arch="x86_64" src="x86_64/sevctl-0.6.0-150700.3.3.1.x86_64.rpm">
          <filename>sevctl-0.6.0-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3163</id>
    <title>Recommended update for ovmf</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1757586261"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247847" id="1247847" title="Firmware descriptors advertise incorrect device for SEV-SNP and TDX" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- Update firmware descriptors to remove tab whitespace (bsc#1247847)
    * Replace tab whitespace with spaces in 50-ovmf-x86_64-sev.json
    * Replace tab whitespace with spaces in 50-ovmf-x86_64-sev-snp.json 
- Update firmware descriptors for SEV-SNP (bsc#1247847)
    * Add 50-ovmf-x86_64-sev-snp.json to support the 'amd-sev-snp' feature.
    * Remove the sev-snp feature from 50-ovmf-x86_64-sev.json.
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.9.1" arch="src" src="src/ovmf-202408-150700.3.9.1.src.rpm">
          <filename>ovmf-202408-150700.3.9.1.src.rpm</filename>
        </package>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.9.1" arch="x86_64" src="x86_64/ovmf-202408-150700.3.9.1.x86_64.rpm">
          <filename>ovmf-202408-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovmf-tools" epoch="0" version="202408" release="150700.3.9.1" arch="x86_64" src="x86_64/ovmf-tools-202408-150700.3.9.1.x86_64.rpm">
          <filename>ovmf-tools-202408-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202408" release="150700.3.9.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202408-150700.3.9.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202408-150700.3.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3273</id>
    <title>Security update for python-h2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1758283923"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57804" id="CVE-2025-57804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-57804" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248737" id="1248737" title="VUL-0: CVE-2025-57804: python-h2: h2 allows HTTP Request Smuggling due to illegal characters in headers" type="bugzilla"/>
    </references>
    <description>This update for python-h2 fixes the following issues:

- CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737) 
</description>
    <pkglist>
      <collection>
        <package name="python-h2" epoch="0" version="3.2.0" release="150200.3.5.1" arch="src" src="src/python-h2-3.2.0-150200.3.5.1.src.rpm">
          <filename>python-h2-3.2.0-150200.3.5.1.src.rpm</filename>
        </package>
        <package name="python3-h2" epoch="0" version="3.2.0" release="150200.3.5.1" arch="noarch" src="noarch/python3-h2-3.2.0-150200.3.5.1.noarch.rpm">
          <filename>python3-h2-3.2.0-150200.3.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3453</id>
    <title>Security update for frr</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759488067"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235237" id="1235237" title="VUL-0: CVE-2024-55553: frr,quagga: repeated RIB revalidation when processing several RPKI updates leads to excessive resource consumption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55553" id="CVE-2024-55553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55553" type="cve"/>
    </references>
    <description>This update for frr fixes the following issues:

- CVE-2024-55553: excessive resource consumption may lead to denial of service due to repeated RIB revalidation when
  processing several RPKI updates (bsc#1235237).
</description>
    <pkglist>
      <collection>
        <package name="frr" epoch="0" version="8.5.6" release="150500.4.33.1" arch="src" src="src/frr-8.5.6-150500.4.33.1.src.rpm">
          <filename>frr-8.5.6-150500.4.33.1.src.rpm</filename>
        </package>
        <package name="libmlag_pb0" epoch="0" version="8.5.6" release="150500.4.33.1" arch="x86_64" src="x86_64/libmlag_pb0-8.5.6-150500.4.33.1.x86_64.rpm">
          <filename>libmlag_pb0-8.5.6-150500.4.33.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3444</id>
    <title>Security update for nginx</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759322585"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53859" id="CVE-2025-53859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53859" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23419" id="CVE-2025-23419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23419" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236851" id="1236851" title="VUL-0: CVE-2025-23419: nginx: client certificate authentication bypass with TLSv1.3 and session resumption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248070" id="1248070" title="VUL-0: CVE-2025-53859: nginx: arbitrary data leak during the NGINX SMTP authentication process" type="bugzilla"/>
    </references>
    <description>This update for nginx fixes the following issues:

- CVE-2025-53859: the server side may leak arbitrary bytes during the NGINX SMTP authentication process (bsc#1248070).
- CVE-2025-23419: session resumption can bypass client certificate authentication requirements using TLSv1.3 (bsc#1236851).
</description>
    <pkglist>
      <collection>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.12.1" arch="src" src="src/nginx-1.21.5-150600.10.12.1.src.rpm">
          <filename>nginx-1.21.5-150600.10.12.1.src.rpm</filename>
        </package>
        <package name="nginx" epoch="0" version="1.21.5" release="150600.10.12.1" arch="x86_64" src="x86_64/nginx-1.21.5-150600.10.12.1.x86_64.rpm">
          <filename>nginx-1.21.5-150600.10.12.1.x86_64.rpm</filename>
        </package>
        <package name="nginx-source" epoch="0" version="1.21.5" release="150600.10.12.1" arch="noarch" src="noarch/nginx-source-1.21.5-150600.10.12.1.noarch.rpm">
          <filename>nginx-source-1.21.5-150600.10.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3172</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1757595242"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248807" id="1248807" title="VUL-0: CVE-2025-27466,CVE-2025-58142,CVE-2025-58143: xen: Mutiple vulnerabilities in the Viridian interface (XSA-472)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58143" id="CVE-2025-58143" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58143" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58142" id="CVE-2025-58142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58142" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27466" id="CVE-2025-27466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27466" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

Security issues fixed:    
    
- CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807).
- CVE-2025-58142: NULL pointer dereference in the Viridian interface due to assumption that the SIM page is mapped when
  a synthetic timer message has to be delivered (bsc#1248807).
- CVE-2025-58143: information leak and reference counter underflow in the Viridian interface due to race in the mapping
  of the reference TSC page (bsc#1248807).

Other issues fixed:
    
- efi: Call FreePages() only if needed (bsc#1027519).
- x86/hpet: do local APIC EOI after interrupt processing (bsc#1027519).
- x86/hvm/ioreq: Fix condition in hvm_alloc_legacy_ioreq_gfn() (bsc#1027519).
- x86/idle: Fix the C6 eoi_errata[] list to include NEHALEM_EX (bsc#1027519).
- x86/iommu: setup MMCFG ahead of IOMMU (bsc#1027519).
- x86/mce: Adjustments to intel_init_ppin() (bsc#1027519).
- x86/mkelf32: pad load segment to 2Mb boundary (bsc#1027519).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.1_04" release="150700.3.11.1" arch="src" src="src/xen-4.20.1_04-150700.3.11.1.src.rpm">
          <filename>xen-4.20.1_04-150700.3.11.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen" epoch="0" version="4.20.1_04" release="150700.3.11.1" arch="x86_64" src="x86_64/xen-4.20.1_04-150700.3.11.1.x86_64.rpm">
          <filename>xen-4.20.1_04-150700.3.11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.1_04" release="150700.3.11.1" arch="x86_64" src="x86_64/xen-devel-4.20.1_04-150700.3.11.1.x86_64.rpm">
          <filename>xen-devel-4.20.1_04-150700.3.11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.1_04" release="150700.3.11.1" arch="x86_64" src="x86_64/xen-tools-4.20.1_04-150700.3.11.1.x86_64.rpm">
          <filename>xen-tools-4.20.1_04-150700.3.11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.1_04" release="150700.3.11.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.1_04-150700.3.11.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.1_04-150700.3.11.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3699</id>
    <title>Security update for krb5</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761041290"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576" id="CVE-2025-3576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241219" id="1241219" title="VUL-0: CVE-2025-3576: krb5: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using
  RC4-HMAC-MD5 (bsc#1241219).

Krb5 as very old protocol supported quite a number of ciphers
that are not longer up to current cryptographic standards.

To avoid problems with those, SUSE has by default now disabled
those alorithms.

The following algorithms have been removed from valid krb5 enctypes:

- des3-cbc-sha1
- arcfour-hmac-md5

To reenable those algorithms, you can use allow options in krb5.conf:

[libdefaults]
allow_des3 = true
allow_rc4 = true

to reenable them.
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="150600.11.14.1" arch="src" src="src/krb5-1.20.1-150600.11.14.1.src.rpm">
          <filename>krb5-1.20.1-150600.11.14.1.src.rpm</filename>
        </package>
        <package name="krb5-plugin-kdb-ldap" epoch="0" version="1.20.1" release="150600.11.14.1" arch="x86_64" src="x86_64/krb5-plugin-kdb-ldap-1.20.1-150600.11.14.1.x86_64.rpm">
          <filename>krb5-plugin-kdb-ldap-1.20.1-150600.11.14.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-server" epoch="0" version="1.20.1" release="150600.11.14.1" arch="x86_64" src="x86_64/krb5-server-1.20.1-150600.11.14.1.x86_64.rpm">
          <filename>krb5-server-1.20.1-150600.11.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3421</id>
    <title>Recommended update for sysstat</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759125744"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244553" id="1244553" title="L3: EMU: L3: sysstat systemd timers not enabled after upgrade to 15-SP6" type="bugzilla"/>
    </references>
    <description>This update for sysstat fixes the following issues:

- removal of broken symlinks during the post-install phase (bsc#1244553).
  </description>
    <pkglist>
      <collection>
        <package name="sysstat" epoch="0" version="12.0.2" release="150000.3.51.1" arch="src" src="src/sysstat-12.0.2-150000.3.51.1.src.rpm">
          <filename>sysstat-12.0.2-150000.3.51.1.src.rpm</filename>
        </package>
        <package name="sysstat-isag" epoch="0" version="12.0.2" release="150000.3.51.1" arch="x86_64" src="x86_64/sysstat-isag-12.0.2-150000.3.51.1.x86_64.rpm">
          <filename>sysstat-isag-12.0.2-150000.3.51.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4069</id>
    <title>Recommended update for openmpi4</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762935089"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-13376" id="PED-13376" title="https://jira.suse.com/browse/PED-13376" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-13373" id="PED-13373" title="https://jira.suse.com/browse/PED-13373" type="jira"/>
    </references>
    <description>This update for openmpi4 fixes the following issues:

- Enable Grid Cluster Scheduler support (jsc#PED-13373, jsc#PED-13376)
</description>
    <pkglist>
      <collection>
        <package name="openmpi4" epoch="0" version="4.1.7" release="150700.4.3.1" arch="src" src="src/openmpi4-4.1.7-150700.4.3.1.src.rpm">
          <filename>openmpi4-4.1.7-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="openmpi4" epoch="0" version="4.1.7" release="150700.4.3.1" arch="x86_64" src="x86_64/openmpi4-4.1.7-150700.4.3.1.x86_64.rpm">
          <filename>openmpi4-4.1.7-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="openmpi4-config" epoch="0" version="4.1.7" release="150700.4.3.1" arch="x86_64" src="x86_64/openmpi4-config-4.1.7-150700.4.3.1.x86_64.rpm">
          <filename>openmpi4-config-4.1.7-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="openmpi4-devel" epoch="0" version="4.1.7" release="150700.4.3.1" arch="x86_64" src="x86_64/openmpi4-devel-4.1.7-150700.4.3.1.x86_64.rpm">
          <filename>openmpi4-devel-4.1.7-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="openmpi4-docs" epoch="0" version="4.1.7" release="150700.4.3.1" arch="x86_64" src="x86_64/openmpi4-docs-4.1.7-150700.4.3.1.x86_64.rpm">
          <filename>openmpi4-docs-4.1.7-150700.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="openmpi4-libs" epoch="0" version="4.1.7" release="150700.4.3.1" arch="x86_64" src="x86_64/openmpi4-libs-4.1.7-150700.4.3.1.x86_64.rpm">
          <filename>openmpi4-libs-4.1.7-150700.4.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3430</id>
    <title>Recommended update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759240255"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230649" id="1230649" title="L3: coredumps for /usr/bin/host (/usr/bin/host $HOST 2&gt;&amp;- Aborted (core dumped))" type="bugzilla"/>
    </references>
    <description>This update for bind fixes the following issues:

- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.11" release="150700.3.9.1" arch="src" src="src/bind-9.20.11-150700.3.9.1.src.rpm">
          <filename>bind-9.20.11-150700.3.9.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.11" release="150700.3.9.1" arch="x86_64" src="x86_64/bind-9.20.11-150700.3.9.1.x86_64.rpm">
          <filename>bind-9.20.11-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.11" release="150700.3.9.1" arch="noarch" src="noarch/bind-doc-9.20.11-150700.3.9.1.noarch.rpm">
          <filename>bind-doc-9.20.11-150700.3.9.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3486</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759904225"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249088" id="1249088" title="L3: bug in grub2-2.12-150600.6.13" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.16.1" arch="src" src="src/grub2-2.12-150700.19.16.1.src.rpm">
          <filename>grub2-2.12-150700.19.16.1.src.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.16.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.16.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.16.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3694</id>
    <title>Recommended update for mariadb</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761025712"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249396" id="1249396" title="MariaDB Startup Failure After SLES 15 SP7 Update" type="bugzilla"/>
    </references>
    <description>This update for mariadb fixes the following issues:

- Read config files when doing mysql_upgrade (bsc#1249396)
</description>
    <pkglist>
      <collection>
        <package name="libmariadbd-devel" epoch="0" version="11.8.3" release="150700.3.6.1" arch="x86_64" src="x86_64/libmariadbd-devel-11.8.3-150700.3.6.1.x86_64.rpm">
          <filename>libmariadbd-devel-11.8.3-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libmariadbd19" epoch="0" version="11.8.3" release="150700.3.6.1" arch="x86_64" src="x86_64/libmariadbd19-11.8.3-150700.3.6.1.x86_64.rpm">
          <filename>libmariadbd19-11.8.3-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.3" release="150700.3.6.1" arch="src" src="src/mariadb-11.8.3-150700.3.6.1.src.rpm">
          <filename>mariadb-11.8.3-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.3" release="150700.3.6.1" arch="x86_64" src="x86_64/mariadb-11.8.3-150700.3.6.1.x86_64.rpm">
          <filename>mariadb-11.8.3-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-client" epoch="0" version="11.8.3" release="150700.3.6.1" arch="x86_64" src="x86_64/mariadb-client-11.8.3-150700.3.6.1.x86_64.rpm">
          <filename>mariadb-client-11.8.3-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-errormessages" epoch="0" version="11.8.3" release="150700.3.6.1" arch="noarch" src="noarch/mariadb-errormessages-11.8.3-150700.3.6.1.noarch.rpm">
          <filename>mariadb-errormessages-11.8.3-150700.3.6.1.noarch.rpm</filename>
        </package>
        <package name="mariadb-tools" epoch="0" version="11.8.3" release="150700.3.6.1" arch="x86_64" src="x86_64/mariadb-tools-11.8.3-150700.3.6.1.x86_64.rpm">
          <filename>mariadb-tools-11.8.3-150700.3.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3934</id>
    <title>Recommended update for cyrus-sasl</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762255427"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247498" id="1247498" title="Delayed login on many VMs during Tenable scan" type="bugzilla"/>
    </references>
    <description>This update for cyrus-sasl fixes the following issue:

- Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498).</description>
    <pkglist>
      <collection>
        <package name="cyrus-sasl-bdb" epoch="0" version="2.1.28" release="150600.7.9.2" arch="src" src="src/cyrus-sasl-bdb-2.1.28-150600.7.9.2.src.rpm">
          <filename>cyrus-sasl-bdb-2.1.28-150600.7.9.2.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-bdb-devel" epoch="0" version="2.1.28" release="150600.7.9.2" arch="x86_64" src="x86_64/cyrus-sasl-bdb-devel-2.1.28-150600.7.9.2.x86_64.rpm">
          <filename>cyrus-sasl-bdb-devel-2.1.28-150600.7.9.2.x86_64.rpm</filename>
        </package>
        <package name="cyrus-sasl-saslauthd" epoch="0" version="2.1.28" release="150600.7.9.2" arch="src" src="src/cyrus-sasl-saslauthd-2.1.28-150600.7.9.2.src.rpm">
          <filename>cyrus-sasl-saslauthd-2.1.28-150600.7.9.2.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-sqlauxprop" epoch="0" version="2.1.28" release="150600.7.9.2" arch="x86_64" src="x86_64/cyrus-sasl-sqlauxprop-2.1.28-150600.7.9.2.x86_64.rpm">
          <filename>cyrus-sasl-sqlauxprop-2.1.28-150600.7.9.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3692</id>
    <title>Recommended update for 389-ds</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761025625"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249033" id="1249033" title="L3: ns-slapd being killed with a SEG fault - need appcore analyzed" type="bugzilla"/>
    </references>
    <description>This update for 389-ds fixes the following issues:

- prevent segfault on extremely large queries (bsc#1249033).
- do not delete referrals on chain_on_update backend
- prevent stack depth being hit
- The parentId attribute is indexed with improper matching rule
- When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- memberOf - ignored deferred updates with LMDB
- Compilation failure with rust-1.89 on Fedora ELN
- UI - Replace deprecated Select components with new TypeaheadSelect
- UI - Fix typeahead Select fields losing values on Enter keypress
- UI - Show error message when trying to use unavailable ports
- More UI fixes
- Revise time skew check in healthcheck tool and add option to exclude checks
- UI - update Radio handlers and LDAP entries last modified time
- dsconf monitor server fails with ldapi:// due to absent server ID
- Make user/subtree policy creation idempotent
- AddressSanitizer: leak in agmt_update_init_status
- AddressSanitizer: leak in do_search
- AddressSanitizer: memory leak in mdb_init
- Memory leak in roles_cache_create_object_from_entry part 2
- Memory leak in roles_cache_create_object_from_entry
- RFE - Allow system to manage uid/gid at startup
- Adjust xfail marks
- ns-slapd crashes when a referral is added
- CLI - Fix default error log level
- Fix disk monitoring test failures and improve test maintainability
- Mask password hashes in audit logs
- Add test for numSubordinates replication consistency with tombstones
- Add test for entryUSN overflow on failed add operations
- Crash if repl keep alive entry can not be created
- Log user that is updated during password modify extended operation
- dsconf - Replicas with the &quot;consumer&quot; role allow for viewing and modification of their changelog.
- instance read-only mode is broken
- Prevent repeated disconnect logs during shutdown
- compressed log rotation creates files with world readable permission
- str2filter is not fully applying matching rules
- UI - schema attribute table expansion break after moving to a new page
- CLI, UI - Properly handle disabled NDN cache
- uiduniq: allow specifying match rules in the filter
</description>
    <pkglist>
      <collection>
        <package name="389-ds" epoch="0" version="2.5.3~git144.95b15d57c" release="150700.3.6.1" arch="src" src="src/389-ds-2.5.3~git144.95b15d57c-150700.3.6.1.src.rpm">
          <filename>389-ds-2.5.3~git144.95b15d57c-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="389-ds" epoch="0" version="2.5.3~git144.95b15d57c" release="150700.3.6.1" arch="x86_64" src="x86_64/389-ds-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm">
          <filename>389-ds-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="389-ds-devel" epoch="0" version="2.5.3~git144.95b15d57c" release="150700.3.6.1" arch="x86_64" src="x86_64/389-ds-devel-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm">
          <filename>389-ds-devel-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="lib389" epoch="0" version="2.5.3~git144.95b15d57c" release="150700.3.6.1" arch="x86_64" src="x86_64/lib389-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm">
          <filename>lib389-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libsvrcore0" epoch="0" version="2.5.3~git144.95b15d57c" release="150700.3.6.1" arch="x86_64" src="x86_64/libsvrcore0-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm">
          <filename>libsvrcore0-2.5.3~git144.95b15d57c-150700.3.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4360</id>
    <title>Recommended update for apache2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765422490"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249359" id="1249359" title="L3: Apache2: misleading error message in /usr/sbin/start_apache2 when MPM binary is missing" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- Fixed binary path for Apache's MPM that was partially duplicated when it
  can't be invoked/found (bsc#1249359)
</description>
    <pkglist>
      <collection>
        <package name="apache2" epoch="0" version="2.4.51" release="150400.6.49.1" arch="src" src="src/apache2-2.4.51-150400.6.49.1.src.rpm">
          <filename>apache2-2.4.51-150400.6.49.1.src.rpm</filename>
        </package>
        <package name="apache2-doc" epoch="0" version="2.4.51" release="150400.6.49.1" arch="noarch" src="noarch/apache2-doc-2.4.51-150400.6.49.1.noarch.rpm">
          <filename>apache2-doc-2.4.51-150400.6.49.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4358</id>
    <title>Recommended update for apache2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765422317"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249359" id="1249359" title="L3: Apache2: misleading error message in /usr/sbin/start_apache2 when MPM binary is missing" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- Fixed binary path for Apache's MPM that was partially duplicated when it
  can't be invoked/found (bsc#1249359)
</description>
    <pkglist>
      <collection>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.6.1" arch="src" src="src/apache2-devel-2.4.62-150700.4.6.1.src.rpm">
          <filename>apache2-devel-2.4.62-150700.4.6.1.src.rpm</filename>
        </package>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.6.1" arch="x86_64" src="x86_64/apache2-devel-2.4.62-150700.4.6.1.x86_64.rpm">
          <filename>apache2-devel-2.4.62-150700.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.6.1" arch="src" src="src/apache2-utils-2.4.62-150700.4.6.1.src.rpm">
          <filename>apache2-utils-2.4.62-150700.4.6.1.src.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.6.1" arch="x86_64" src="x86_64/apache2-utils-2.4.62-150700.4.6.1.x86_64.rpm">
          <filename>apache2-utils-2.4.62-150700.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.6.1" arch="src" src="src/apache2-worker-2.4.62-150700.4.6.1.src.rpm">
          <filename>apache2-worker-2.4.62-150700.4.6.1.src.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.6.1" arch="x86_64" src="x86_64/apache2-worker-2.4.62-150700.4.6.1.x86_64.rpm">
          <filename>apache2-worker-2.4.62-150700.4.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3606</id>
    <title>Security update for squid</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1760535509"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59362" id="CVE-2025-59362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59362" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250627" id="1250627" title="VUL-0: CVE-2025-59362: squid: squid-cache: Squid cache buffer overflow" type="bugzilla"/>
    </references>
    <description>This update for squid fixes the following issues:

- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
</description>
    <pkglist>
      <collection>
        <package name="squid" epoch="0" version="6.10" release="150600.3.9.1" arch="src" src="src/squid-6.10-150600.3.9.1.src.rpm">
          <filename>squid-6.10-150600.3.9.1.src.rpm</filename>
        </package>
        <package name="squid" epoch="0" version="6.10" release="150600.3.9.1" arch="x86_64" src="x86_64/squid-6.10-150600.3.9.1.x86_64.rpm">
          <filename>squid-6.10-150600.3.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3502</id>
    <title>Security update for valkey</title>
    <severity>critical</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1759961055"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49844" id="CVE-2025-49844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49844" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46819" id="CVE-2025-46819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46818" id="CVE-2025-46818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46818" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46817" id="CVE-2025-46817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46817" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250995" id="1250995" title="VUL-0: CVE-2025-49844,CVE-2025-46817,CVE-2025-46818,CVE-2025-46819: valkey,redis,redis7: multiple LUA issues" type="bugzilla"/>
    </references>
    <description>This update for valkey to version 8.0.6 fixes the following security issues:

- CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
  [bsc#1250995]

- CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and
  potential remote code execution. [bsc#1250995]

- CVE-2025-46818: Malicious Lua scripts can be executed in the context of
  another user. [bsc#1250995]

- CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to
  facilitate denial-of-service attacks. [bsc#1250995]
</description>
    <pkglist>
      <collection>
        <package name="valkey" epoch="0" version="8.0.6" release="150700.3.11.1" arch="src" src="src/valkey-8.0.6-150700.3.11.1.src.rpm">
          <filename>valkey-8.0.6-150700.3.11.1.src.rpm</filename>
        </package>
        <package name="valkey" epoch="0" version="8.0.6" release="150700.3.11.1" arch="x86_64" src="x86_64/valkey-8.0.6-150700.3.11.1.x86_64.rpm">
          <filename>valkey-8.0.6-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="valkey-compat-redis" epoch="0" version="8.0.6" release="150700.3.11.1" arch="noarch" src="noarch/valkey-compat-redis-8.0.6-150700.3.11.1.noarch.rpm">
          <filename>valkey-compat-redis-8.0.6-150700.3.11.1.noarch.rpm</filename>
        </package>
        <package name="valkey-devel" epoch="0" version="8.0.6" release="150700.3.11.1" arch="x86_64" src="x86_64/valkey-devel-8.0.6-150700.3.11.1.x86_64.rpm">
          <filename>valkey-devel-8.0.6-150700.3.11.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3977</id>
    <title>Recommended update for ovmf</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762437476"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250048" id="1250048" title="Backport fix for ovmf from bsc#1248736 to SLE15SP6" type="bugzilla"/>
    </references>
    <description>This update for ovmf fixes the following issues:

- Add backported patch for ovmf (bsc#1250048)
    * MdeModulePkg: Leak Memory if Not RW on FreePages
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.12.1" arch="src" src="src/ovmf-202408-150700.3.12.1.src.rpm">
          <filename>ovmf-202408-150700.3.12.1.src.rpm</filename>
        </package>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.12.1" arch="x86_64" src="x86_64/ovmf-202408-150700.3.12.1.x86_64.rpm">
          <filename>ovmf-202408-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovmf-tools" epoch="0" version="202408" release="150700.3.12.1" arch="x86_64" src="x86_64/ovmf-tools-202408-150700.3.12.1.x86_64.rpm">
          <filename>ovmf-tools-202408-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202408" release="150700.3.12.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202408-150700.3.12.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202408-150700.3.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3750</id>
    <title>Recommended update for libvirt</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761212400"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241211" id="1241211" title="[SLES 15.7] virt-install command will return &quot;Unable to find 'efi' firmware that is compatible with the current configuration&quot;" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs (bsc#1241211)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.10.1" arch="src" src="src/libvirt-11.0.0-150700.4.10.1.src.rpm">
          <filename>libvirt-11.0.0-150700.4.10.1.src.rpm</filename>
        </package>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-client-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-client-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-client-qemu-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-client-qemu-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-common-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-common-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-nwfilter" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-config-nwfilter-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-config-nwfilter-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-libxl" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-libxl-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-libxl-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-log-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-log-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-sanlock-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-xen" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-daemon-xen-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-daemon-xen-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-devel-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-devel-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" epoch="0" version="11.0.0" release="150700.4.10.1" arch="noarch" src="noarch/libvirt-doc-11.0.0-150700.4.10.1.noarch.rpm">
          <filename>libvirt-doc-11.0.0-150700.4.10.1.noarch.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="11.0.0" release="150700.4.10.1" arch="x86_64" src="x86_64/libvirt-nss-11.0.0-150700.4.10.1.x86_64.rpm">
          <filename>libvirt-nss-11.0.0-150700.4.10.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3792</id>
    <title>Recommended update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761319514"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228343" id="1228343" title="AMD Turin platform: SLES guests fail to boot when vcpu &gt;255" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251822" id="1251822" title="L3: The supportconfig plugin of libvirt, qemu, and virt-manager needs porting to supportconfig.rc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230042" id="1230042" title="[SLM6.2][PPC64LE] Fail to start QEMU - qemu-system-ppc64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240157" id="1240157" title="[cockpit] virtual-machines - run imported qcow2 vm got internal error because of  'failed to find romfile efi-virtio.rom'" type="bugzilla"/>
    </references>
    <description>This update for qemu fixes the following issues:

- [openSUSE] rpm/spec: qemu-vgabios is required on ppc (bsc#1230042)
- [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157)
- [openSUSE] supportconfig: Adapt plugin to modern supportconfig (bsc#1251822)
- tests/acpi: q35: Update host address width in DMAR (bsc#1228343)
- intel_iommu: Set default aw_bits to 48 starting from QEMU 9.2 (bsc#1228343)
- tests/acpi: q35: allow DMAR acpi table changes (bsc#1228343)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.33.2" arch="src" src="src/qemu-7.1.0-150500.49.33.2.src.rpm">
          <filename>qemu-7.1.0-150500.49.33.2.src.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.33.2" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.33.2.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.33.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3809</id>
    <title>Security update for rabbitmq-server</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761570694"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246091" id="1246091" title="VUL-0: rabbitmq-server: bad logrotate configuration allows potential escalation from rabbitmq to root" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245105" id="1245105" title="VUL-0: CVE-2025-50200: rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP request" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50200" id="CVE-2025-50200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50200" type="cve"/>
    </references>
    <description>This update for rabbitmq-server fixes the following issues:

  - CVE-2025-50200: prevented logging of Basic Auth header from HTTP requests (bsc#1245105)
  - fixed a bad logrotate configuration that allowed escalation from rabbitmq to root, /var/log/rabbitmq ownership is now 750 (bsc#1246091)
</description>
    <pkglist>
      <collection>
        <package name="erlang-rabbitmq-client" epoch="0" version="3.8.11" release="150300.3.22.2" arch="x86_64" src="x86_64/erlang-rabbitmq-client-3.8.11-150300.3.22.2.x86_64.rpm">
          <filename>erlang-rabbitmq-client-3.8.11-150300.3.22.2.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server" epoch="0" version="3.8.11" release="150300.3.22.2" arch="src" src="src/rabbitmq-server-3.8.11-150300.3.22.2.src.rpm">
          <filename>rabbitmq-server-3.8.11-150300.3.22.2.src.rpm</filename>
        </package>
        <package name="rabbitmq-server" epoch="0" version="3.8.11" release="150300.3.22.2" arch="x86_64" src="x86_64/rabbitmq-server-3.8.11-150300.3.22.2.x86_64.rpm">
          <filename>rabbitmq-server-3.8.11-150300.3.22.2.x86_64.rpm</filename>
        </package>
        <package name="rabbitmq-server-plugins" epoch="0" version="3.8.11" release="150300.3.22.2" arch="x86_64" src="x86_64/rabbitmq-server-plugins-3.8.11-150300.3.22.2.x86_64.rpm">
          <filename>rabbitmq-server-plugins-3.8.11-150300.3.22.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3990</id>
    <title>Recommended update for mirror</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762527703"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252164" id="1252164" title="fix the %licence tag for mirror" type="bugzilla"/>
    </references>
    <description>This update for mirror fixes the following issue:

- Fix the %licence tag for the package (bsc#1252164).</description>
    <pkglist>
      <collection>
        <package name="mirror" epoch="0" version="2.9" release="150000.3.9.2" arch="noarch" src="noarch/mirror-2.9-150000.3.9.2.noarch.rpm">
          <filename>mirror-2.9-150000.3.9.2.noarch.rpm</filename>
        </package>
        <package name="mirror" epoch="0" version="2.9" release="150000.3.9.2" arch="src" src="src/mirror-2.9-150000.3.9.2.src.rpm">
          <filename>mirror-2.9-150000.3.9.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3793</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761320130"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251271" id="1251271" title="VUL-0: EMBARGOED: CVE-2025-58147,CVE-2025-58148: xen: Incorrect input sanitisation in Viridian hypercalls (XSA-475)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58148" id="CVE-2025-58148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58147" id="CVE-2025-58147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58147" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2025-58147, CVE-2025-58148: fixed input sanitisation in Viridian hypercalls (XSA-475, bsc#1251271)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.1_06" release="150700.3.14.1" arch="src" src="src/xen-4.20.1_06-150700.3.14.1.src.rpm">
          <filename>xen-4.20.1_06-150700.3.14.1.src.rpm</filename>
        </package>
        <package name="xen" epoch="0" version="4.20.1_06" release="150700.3.14.1" arch="x86_64" src="x86_64/xen-4.20.1_06-150700.3.14.1.x86_64.rpm">
          <filename>xen-4.20.1_06-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.1_06" release="150700.3.14.1" arch="x86_64" src="x86_64/xen-devel-4.20.1_06-150700.3.14.1.x86_64.rpm">
          <filename>xen-devel-4.20.1_06-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.1_06" release="150700.3.14.1" arch="x86_64" src="x86_64/xen-tools-4.20.1_06-150700.3.14.1.x86_64.rpm">
          <filename>xen-tools-4.20.1_06-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.1_06" release="150700.3.14.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.1_06-150700.3.14.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.1_06-150700.3.14.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3807</id>
    <title>Security update for erlang</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761569935"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249473" id="1249473" title="https://bugzilla.suse.com/show_bug.cgi?id=1249473" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48041" id="CVE-2025-48041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48041" type="cve"/>
    </references>
    <description>This update for erlang fixes the following issues:

  - CVE-2025-48041: fixed erlang exhaustion of file handles in SSH (bsc#1249473)
</description>
    <pkglist>
      <collection>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.26.1" arch="src" src="src/erlang-23.3.4.19-150300.3.26.1.src.rpm">
          <filename>erlang-23.3.4.19-150300.3.26.1.src.rpm</filename>
        </package>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.26.1" arch="x86_64" src="x86_64/erlang-23.3.4.19-150300.3.26.1.x86_64.rpm">
          <filename>erlang-23.3.4.19-150300.3.26.1.x86_64.rpm</filename>
        </package>
        <package name="erlang-epmd" epoch="0" version="23.3.4.19" release="150300.3.26.1" arch="x86_64" src="x86_64/erlang-epmd-23.3.4.19-150300.3.26.1.x86_64.rpm">
          <filename>erlang-epmd-23.3.4.19-150300.3.26.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-3903</id>
    <title>Security update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1761930507"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40778" id="CVE-2025-40778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40778" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40780" id="CVE-2025-40780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8677" id="CVE-2025-8677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8677" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252380" id="1252380" title="VUL-0: CVE-2025-40780: bind: cache poisoning due to weak PRNG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252378" id="1252378" title="VUL-0: EMBARGOED: CVE-2025-8677: bind: resource exhaustion via malformed DNSKEY handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252379" id="1252379" title="VUL-0: EMBARGOED: CVE-2025-40778: bind: cache poisoning attacks with unsolicited RRs" type="bugzilla"/>
    </references>
    <description>This update for bind fixes the following issues:

Upgrade to release 9.20.15:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
- CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
- CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.15" release="150700.3.12.1" arch="src" src="src/bind-9.20.15-150700.3.12.1.src.rpm">
          <filename>bind-9.20.15-150700.3.12.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.15" release="150700.3.12.1" arch="x86_64" src="x86_64/bind-9.20.15-150700.3.12.1.x86_64.rpm">
          <filename>bind-9.20.15-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.15" release="150700.3.12.1" arch="noarch" src="noarch/bind-doc-9.20.15-150700.3.12.1.noarch.rpm">
          <filename>bind-doc-9.20.15-150700.3.12.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4054</id>
    <title>Security update for ongres-scram</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762869884"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250399" id="1250399" title="VUL-0: CVE-2025-59432: ongres-scram: timing attack vulnerability in SCRAM Authentication" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59432" id="CVE-2025-59432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59432" type="cve"/>
    </references>
    <description>This update for ongres-scram fixes the following issues:

- CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399)
</description>
    <pkglist>
      <collection>
        <package name="ongres-scram" epoch="0" version="2.1" release="150400.8.5.1" arch="noarch" src="noarch/ongres-scram-2.1-150400.8.5.1.noarch.rpm">
          <filename>ongres-scram-2.1-150400.8.5.1.noarch.rpm</filename>
        </package>
        <package name="ongres-scram" epoch="0" version="2.1" release="150400.8.5.1" arch="src" src="src/ongres-scram-2.1-150400.8.5.1.src.rpm">
          <filename>ongres-scram-2.1-150400.8.5.1.src.rpm</filename>
        </package>
        <package name="ongres-scram-client" epoch="0" version="2.1" release="150400.8.5.1" arch="noarch" src="noarch/ongres-scram-client-2.1-150400.8.5.1.noarch.rpm">
          <filename>ongres-scram-client-2.1-150400.8.5.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4035</id>
    <title>Security update for erlang26</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762782438"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249473" id="1249473" title="VUL-0: CVE-2025-48041: erlang: Erlang Exhaustion of File Handles" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48041" id="CVE-2025-48041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48041" type="cve"/>
    </references>
    <description>This update for erlang26 fixes the following issues:

- CVE-2025-48041: Fixed exhaustion of file handles in ssh (bsc#1249473)
</description>
    <pkglist>
      <collection>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.19.1" arch="src" src="src/erlang26-26.2.1-150300.7.19.1.src.rpm">
          <filename>erlang26-26.2.1-150300.7.19.1.src.rpm</filename>
        </package>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.19.1" arch="x86_64" src="x86_64/erlang26-26.2.1-150300.7.19.1.x86_64.rpm">
          <filename>erlang26-26.2.1-150300.7.19.1.x86_64.rpm</filename>
        </package>
        <package name="erlang26-epmd" epoch="0" version="26.2.1" release="150300.7.19.1" arch="x86_64" src="x86_64/erlang26-epmd-26.2.1-150300.7.19.1.x86_64.rpm">
          <filename>erlang26-epmd-26.2.1-150300.7.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4082</id>
    <title>Recommended update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762953583"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-13647" id="PED-13647" title="https://jira.suse.com/browse/PED-13647" type="jira"/>
    </references>
    <description>This update for openvswitch fixes the following issues:

- Update OVN to 25.03.1
- Update Openvswitch to 3.5.2
- Bug fixes (jsc#PED-13647) 
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_5-0" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/libopenvswitch-3_5-0-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>libopenvswitch-3_5-0-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="libovn-25_03-0" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/libovn-25_03-0-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>libovn-25_03-0-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.2" release="150700.41.6.1" arch="src" src="src/openvswitch-3.5.2-150700.41.6.1.src.rpm">
          <filename>openvswitch-3.5.2-150700.41.6.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-devel" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-devel-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-devel-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-ipsec" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-ipsec-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-ipsec-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-pki" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-pki-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-pki-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-test" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-test-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-test-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-vtep" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/openvswitch-vtep-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>openvswitch-vtep-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-central" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-central-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-central-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-devel" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-devel-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-devel-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-docker" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-docker-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-docker-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-host" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-host-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-host-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-vtep" epoch="0" version="25.03.1" release="150700.41.6.1" arch="x86_64" src="x86_64/ovn-vtep-25.03.1-150700.41.6.1.x86_64.rpm">
          <filename>ovn-vtep-25.03.1-150700.41.6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-openvswitch" epoch="0" version="3.5.2" release="150700.41.6.1" arch="x86_64" src="x86_64/python3-openvswitch-3.5.2-150700.41.6.1.x86_64.rpm">
          <filename>python3-openvswitch-3.5.2-150700.41.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4026</id>
    <title>Security update for squid</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762765970"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62168" id="CVE-2025-62168" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62168" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252281" id="1252281" title="VUL-0: CVE-2025-62168: squid: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate [thread::ZbF--OMrI7mqNf_6pjtWoys::]" type="bugzilla"/>
    </references>
    <description>This update for squid fixes the following issues:

- CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)
</description>
    <pkglist>
      <collection>
        <package name="squid" epoch="0" version="6.10" release="150600.3.14.1" arch="src" src="src/squid-6.10-150600.3.14.1.src.rpm">
          <filename>squid-6.10-150600.3.14.1.src.rpm</filename>
        </package>
        <package name="squid" epoch="0" version="6.10" release="150600.3.14.1" arch="x86_64" src="x86_64/squid-6.10-150600.3.14.1.x86_64.rpm">
          <filename>squid-6.10-150600.3.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4052</id>
    <title>Recommended update for dpdk</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762857055"/>
    <references/>
    <description>This update for dpdk fixes the following issues:

- acl: fix build with GCC 15 on aarch64
- app/crypto-perf: fix AAD offset alignment
- app/eventdev: fix number of releases sent during cleanup
- app/testpmd: 
    * fix: flow random item token and RSS hash key update
    * relax number of TCs in DCB command
- buildtools/test: scan muti-line registrations
- bus/auxiliary: fix crash in cleanup
- bus: cleanup device lists
- bus/fslmc: fix use after free
- bus/pci/bsd: fix device existence check
- bus/vmbus: 
    * align ring buffer data to page boundary
    * use Hyper-V page size
- common/cnxk: 
    * fix: AES-CTR salt handling, aura offset, CQ tail drop, 
      E-tag pattern parsing, qsize in CPT iq enable  
- common/dpaax: 
    * fix: PDCP AES only 12-bit SN, PDCP key command race condition
- common/mlx5: 
    * fix: dependency detection on Windows and extraction of auxiliary device name
- crypto/cnxk: 
    * fix: out-of-bounds access in SM2, QP stats, uninitialized variable
      and update SG list population
- crypto/dpaa2_sec: fix uninitialized variable
- crypto/openssl: include private exponent in RSA session
- crypto/qat: 
    * fix: out-of-place chain/cipher/auth headers, out-of-place header bytes in AEAD raw API
      and size calculation for memset
- crypto/virtio: 
    * add request check on request side
    * fix cipher data source length and driver cleanup
- doc: 
    * add kernel options required for mlx5
    * fix missing feature matrix for event device
    * remove reference to deprecated –use-device option
- dts: fix deterministic doc
- eal: 
    * add description of service corelist in usage
    * fix return value of lcore role and warn if no lcore is available
- eal/freebsd: unregister alarm callback before free
- eal/linux: improve ASLR check and unregister alarm callback before free
- eal/unix: fix log message for madvise failure
- eal/x86: fix C++ build
- ethdev: fix error struct in flow configure and keep promiscuous/allmulti value before disabling
- event/cnxk: fix missing HW state checks
- eventdev: fix flag types consistency
- event/dlb2: 
    * fix: default credits based on HW version, dequeue with CQ depth less than or equal to 16,
      num single link ports for DLB2.5,public symbol namespace, QID depth xstat, 
      validaton of LDB port COS ID arguments   
- examples/flow_filtering: fix make clean
- examples/ipsec-secgw: fix crash in event vector mode, crash with IPv6 and number of queue pairs
- examples/ntb: check more heap allocations
- mem: fix lockup on address space shortage
- net/af_xdp: fix use after free in zero-copy Tx
- net/bonding: avoid RSS RETA update in flow isolation mode
- net/cnxk: fix descriptor count update on reconfig and lock for security session operations
- net/e1000: fix EEPROM dump, igb Tx queue offloads capability and xstats name
- net/ena: fix aenq timeout with low poll interval and control path interrupt mode
- net: fix IPv6 check for IPv4 compat
- net/fm10k/base: fix compilation warnings
- net/hns3: 
    * allow Tx vector when fast free not enabled, 
    * check requirement for hardware GRO and Rx packet without CRC data
    * fix: CRC data segment,divide by zero, extra wait for link up, 
      integer overflow in interrupt unmap, interrupt rollback, memory leak for indirect flow action,
      memory leak on failure, queue TC configuration on VF,resources release on reset,  
- net/i40e/base: fix compiler warnings and unused value warnings
- net/i40e: fix RSS on plain IPv4
- net/iavf: fix VLAN strip disabling for ADQ v2 capability and setting after enabling filter
- net/ice/base: fix integer overflow, media type check, type conversion and typo in device ID description
- net/ice: 
    * fix: flow creation failure, handling empty DCF RSS hash, 
      querying RSS hash for DCF and support for 3 scheduler levels
- net/idpf: fix truncation of constant value
- net/ixgbe/base: 
    * correct definition of endianness macro, 
    * fix: compilation warnings, link status for E610 and lock checker errors  
- net/ixgbe: 
    * enable ethertype filter for E610
    * fix: indentation, port mask default value in filter, 
    * remove VLANs and skip MACsec stats for E610  
- net/mana: check vendor ID when probing RDMA device
- net/mlx5: 
    * align PF and VF/SF MAC address handling, avoid setting kernel MTU if not needed, 
    * fix: access to auxiliary flow data, counter pool init error propagation
      counter service cleanup on init failure, crash in HWS counter pool destroy,
      crash on age query with indirect conntrack, error notification for large flow patterns,
      flex tunnel flow validation, crash in HWS counter pool destroy, 
      crash on age query with indirect conntrack,
      GRE flow item validation, header modify action on group 0, 
      hypervisor detection in VLAN workaround, link on Windows,
      mark action with shared Rx queue,masked indirect age action validation,
      maximal queue size query, out-of-order completions in ordinary Rx burst,
      template flow rule identification, validation for GENEVE options,
      VLAN stripping on hairpin queue, WQE size calculation for Tx queue,
      remove unsupported flow meter action in HWS, validate GTP PSC QFI width  
- net/mlx5/hws: fix send queue drain on FW WQE destroy
- net/netvsc: add stats counters from VF and use Hyper-V page size
- net/nfp: 
    * fix: control message overflow, crash with null RSS hash key
      flow rule freeing , hash key length logic, 
    * standardize: NFD3 Tx descriptor endianness and Rx descriptor endianness
- net/ngbe: fix device statistics and MAC control frame forwarding
- net/ntnic: 
    * avoid divide by zero
    * fix ring queue operation
    * remove unused code
    * unmap DMA during queue release
- net/null: fix packet copy
- net/octeon_ep:
    * fix buffer refill
    * increase mailbox timeout
- net/qede: fix use after free
- net/sfc: fix action order on start failure
- net/tap: fix qdisc add failure handling
- net/txgbe: 
    * add LRO flag in mbuf when enabled
    * fix: device statistics, FDIR perfect mode for IPv6
      MAC control frame forwarding, ntuple filter parsing,
      packet type for FDIR filter, raw pattern match for FDIR rule
      reserved extra FDIR headroom, create FDIR filter for SCTP packet adn tunnel packet
    * restrict VLAN strip configuration on VF
- pcapng: fix null dereference in close
- power/intel_uncore: fix crash closing uninitialized driver
- test/crypto:
    * fix: auth and cipher case IV length, EdDSA vector description,
      RSA decrypt validation, RSA vector as per RFC 8017
    * set to null after freeing operation
- test/lcore: fix race in per-lcore test
- test/malloc: improve resiliency
- trace: fix overflow in per-lcore trace buffer
- vhost/crypto: fix cipher data length
- vhost: 
    * fix net control virtqueue used length, wrapping on control virtqueue rings 
    * search virtqueues driver data in read-only area
- Fix issue with always_inline on older gcc7
</description>
    <pkglist>
      <collection>
        <package name="dpdk" epoch="0" version="24.11.3" release="150700.3.3.1" arch="src" src="src/dpdk-24.11.3-150700.3.3.1.src.rpm">
          <filename>dpdk-24.11.3-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="dpdk" epoch="0" version="24.11.3" release="150700.3.3.1" arch="x86_64" src="x86_64/dpdk-24.11.3-150700.3.3.1.x86_64.rpm">
          <filename>dpdk-24.11.3-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-devel" epoch="0" version="24.11.3" release="150700.3.3.1" arch="x86_64" src="x86_64/dpdk-devel-24.11.3-150700.3.3.1.x86_64.rpm">
          <filename>dpdk-devel-24.11.3-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-tools" epoch="0" version="24.11.3" release="150700.3.3.1" arch="x86_64" src="x86_64/dpdk-tools-24.11.3-150700.3.3.1.x86_64.rpm">
          <filename>dpdk-tools-24.11.3-150700.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-25" epoch="0" version="24.11.3" release="150700.3.3.1" arch="x86_64" src="x86_64/libdpdk-25-24.11.3-150700.3.3.1.x86_64.rpm">
          <filename>libdpdk-25-24.11.3-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4068</id>
    <title>Security update for lasso</title>
    <severity>critical</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1762934679"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47151" id="CVE-2025-47151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47151" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46705" id="CVE-2025-46705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46404" id="CVE-2025-46404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46404" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253092" id="1253092" title="VUL-0: CVE-2025-46404: lasso: Denial of service in Entr'ouvert Lasso" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253095" id="1253095" title="VUL-0: CVE-2025-47151: lasso: type confusion vulnerability in the lasso_node_impl_init_from_xml functionality" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253093" id="1253093" title="VUL-0: CVE-2025-46705: lasso: Denial of service in Entr'ouvert Lasso" type="bugzilla"/>
    </references>
    <description>This update for lasso fixes the following issues:

- CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
- CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
- CVE-2025-47151: Fixed type confusion vulnerability in the
  lasso_node_impl_init_from_xml functionality (bsc#1253095)
</description>
    <pkglist>
      <collection>
        <package name="lasso" epoch="0" version="2.8.2" release="150600.3.5.1" arch="src" src="src/lasso-2.8.2-150600.3.5.1.src.rpm">
          <filename>lasso-2.8.2-150600.3.5.1.src.rpm</filename>
        </package>
        <package name="liblasso3" epoch="0" version="2.8.2" release="150600.3.5.1" arch="x86_64" src="x86_64/liblasso3-2.8.2-150600.3.5.1.x86_64.rpm">
          <filename>liblasso3-2.8.2-150600.3.5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4155</id>
    <title>Recommended update for cyrus-sasl</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1763734219"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233529" id="1233529" title="Python3 error log upon importing pycurl" type="bugzilla"/>
    </references>
    <description>This update for cyrus-sasl fixes the following issues:

- Python3 error log upon importing pycurl (bsc#1233529)
    * Remove senceless log message.
</description>
    <pkglist>
      <collection>
        <package name="cyrus-sasl-bdb" epoch="0" version="2.1.28" release="150600.7.14.1" arch="src" src="src/cyrus-sasl-bdb-2.1.28-150600.7.14.1.src.rpm">
          <filename>cyrus-sasl-bdb-2.1.28-150600.7.14.1.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-bdb-devel" epoch="0" version="2.1.28" release="150600.7.14.1" arch="x86_64" src="x86_64/cyrus-sasl-bdb-devel-2.1.28-150600.7.14.1.x86_64.rpm">
          <filename>cyrus-sasl-bdb-devel-2.1.28-150600.7.14.1.x86_64.rpm</filename>
        </package>
        <package name="cyrus-sasl-saslauthd" epoch="0" version="2.1.28" release="150600.7.14.1" arch="src" src="src/cyrus-sasl-saslauthd-2.1.28-150600.7.14.1.src.rpm">
          <filename>cyrus-sasl-saslauthd-2.1.28-150600.7.14.1.src.rpm</filename>
        </package>
        <package name="cyrus-sasl-sqlauxprop" epoch="0" version="2.1.28" release="150600.7.14.1" arch="x86_64" src="x86_64/cyrus-sasl-sqlauxprop-2.1.28-150600.7.14.1.x86_64.rpm">
          <filename>cyrus-sasl-sqlauxprop-2.1.28-150600.7.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="optional" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4404</id>
    <title>Optional update for davfs2</title>
    <severity>low</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765805813"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-13444" id="PED-13444" title="ECO: davfs2 needed on SLED to mount/access WebDAV resources from Nextcloud servers." type="jira"/>
    </references>
    <description>This update for davfs2 fixes the following issue:

- Add davfs2 to the SLES Basesystem (PED-13444)
</description>
    <pkglist>
      <collection>
        <package name="davfs2" epoch="0" version="1.5.4" release="150000.3.13.1" arch="src" src="src/davfs2-1.5.4-150000.3.13.1.src.rpm">
          <filename>davfs2-1.5.4-150000.3.13.1.src.rpm</filename>
        </package>
        <package name="davfs2" epoch="0" version="1.5.4" release="150000.3.13.1" arch="x86_64" src="x86_64/davfs2-1.5.4-150000.3.13.1.x86_64.rpm">
          <filename>davfs2-1.5.4-150000.3.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4419</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765911438"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-8907" id="PED-8907" title="https://jira.suse.com/browse/PED-8907" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252692" id="1252692" title="VUL-0: CVE-2025-58149: xen: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254180" id="1254180" title="[SLES][15-SP7][x86_64][Build41647]  virtxend service restart" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58149" id="CVE-2025-58149" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58149" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

Update to Xen 4.20.2 (jsc#PED-8907).
    
Security issues fixed:
  
- CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no
  longer assigned to it (XSA-476, bsc#1252692).

Other issues fixed:
    
- Failure to restart xenstored (bsc#1254180).    
    
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.2_02" release="150700.3.19.1" arch="src" src="src/xen-4.20.2_02-150700.3.19.1.src.rpm">
          <filename>xen-4.20.2_02-150700.3.19.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen" epoch="0" version="4.20.2_02" release="150700.3.19.1" arch="x86_64" src="x86_64/xen-4.20.2_02-150700.3.19.1.x86_64.rpm">
          <filename>xen-4.20.2_02-150700.3.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.2_02" release="150700.3.19.1" arch="x86_64" src="x86_64/xen-devel-4.20.2_02-150700.3.19.1.x86_64.rpm">
          <filename>xen-devel-4.20.2_02-150700.3.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.2_02" release="150700.3.19.1" arch="x86_64" src="x86_64/xen-tools-4.20.2_02-150700.3.19.1.x86_64.rpm">
          <filename>xen-tools-4.20.2_02-150700.3.19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.2_02" release="150700.3.19.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.2_02-150700.3.19.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.2_02-150700.3.19.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4305</id>
    <title>Security update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1764336823"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61664" id="CVE-2025-61664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61662" id="CVE-2025-61662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61662" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61661" id="CVE-2025-61661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61661" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54771" id="CVE-2025-54771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54771" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54770" id="CVE-2025-54770" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54770" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61663" id="CVE-2025-61663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61663" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252933" id="1252933" title="VUL-0: EMBARGOED: CVE-2025-61662: grub2: Missing unregister call for gettext command may lead to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252932" id="1252932" title="VUL-0: EMBARGOED: CVE-2025-61661: grub2: Out-of-bounds write in grub_usb_get_string() function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252934" id="1252934" title="VUL-0: EMBARGOED: CVE-2025-61663: grub2: Missing unregister call for normal commands may lead to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245953" id="1245953" title="GRUB: Timeout when loading the initrd" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252930" id="1252930" title="VUL-0: EMBARGOED: CVE-2025-54770: grub2: Missing unregister call for net_set_vlan command may lead to use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252931" id="1252931" title="VUL-0: EMBARGOED: CVE-2025-54771: grub2: grub_file_close() does not properly controls the fs refcount" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252935" id="1252935" title="VUL-0: EMBARGOED: CVE-2025-61664: grub2: Missing unregister call for normal_exit command may lead to use-after-free" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931)
- CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930)
- CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)
- CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)
- CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)
- CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)
  
Other fixes:

- Bump upstream SBAT generation to 6
- Fixed timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.19.1" arch="src" src="src/grub2-2.12-150700.19.19.1.src.rpm">
          <filename>grub2-2.12-150700.19.19.1.src.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.19.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.19.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.19.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4403</id>
    <title>Recommended update for virt-manager</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765805789"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252105" id="1252105" title="Unable to create an SEV-SNP enabled guest with virt-manager" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027942" id="1027942" title="virt-manager: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249466" id="1249466" title="{sck 10.0} [SCK 10.0 RC1-2] (OS bug) Install 4 SLES VMs is failing to install guest VMs because of &quot;Error validating install location: ...&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244685" id="1244685" title="Could not find an installable distribution with virt-install command" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247865" id="1247865" title="sles 16.0 rc3 KVM virt-manager detects windows 2025 as 2022" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-9265" id="PED-9265" title="https://jira.suse.com/browse/PED-9265" type="jira"/>
    </references>
    <description>This update for virt-manager fixes the following issues:

- Unable to create an SEV-SNP enabled guest with virt-manager.
  This simplifies the code from what used to be required for sev while adding initial tdx support. (bsc#1252105)
- Fix issues with detection of openSUSE Leap 16.
- Adjust how we detect sles16 as the media layout changes. (bsc#1244685, bsc#1249466)
- In some cases KVM virt-manager detects windows 2025 as 2022 (bsc#1247865)
- Add support for creating TDX guests in virt-install (jsc#PED-9265)
- Could not find an installable distribution with virt-install command (bsc#1244685)
- Additional Upstream bug fixes (bsc#1027942)
</description>
    <pkglist>
      <collection>
        <package name="virt-install" epoch="0" version="5.0.0" release="150700.7.8.1" arch="noarch" src="noarch/virt-install-5.0.0-150700.7.8.1.noarch.rpm">
          <filename>virt-install-5.0.0-150700.7.8.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.8.1" arch="noarch" src="noarch/virt-manager-5.0.0-150700.7.8.1.noarch.rpm">
          <filename>virt-manager-5.0.0-150700.7.8.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.8.1" arch="src" src="src/virt-manager-5.0.0-150700.7.8.1.src.rpm">
          <filename>virt-manager-5.0.0-150700.7.8.1.src.rpm</filename>
        </package>
        <package name="virt-manager-common" epoch="0" version="5.0.0" release="150700.7.8.1" arch="noarch" src="noarch/virt-manager-common-5.0.0-150700.7.8.1.noarch.rpm">
          <filename>virt-manager-common-5.0.0-150700.7.8.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="optional" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4402</id>
    <title>Optional update for libusb-compat</title>
    <severity>low</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765805771"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219583" id="1219583" title="Installing caja-extension-sendto-blueman fails with unresolved dependency" type="bugzilla"/>
    </references>
    <description>This update for libusb-compat fixes the following issues:

- Ship libusb-0_1-4 to PackageHUB (bsc#1219583)
</description>
    <pkglist>
      <collection>
        <package name="libusb-0_1-4" epoch="0" version="0.1.13" release="150400.14.2.1" arch="x86_64" src="x86_64/libusb-0_1-4-0.1.13-150400.14.2.1.x86_64.rpm">
          <filename>libusb-0_1-4-0.1.13-150400.14.2.1.x86_64.rpm</filename>
        </package>
        <package name="libusb-compat" epoch="0" version="0.1.7" release="150400.14.2.1" arch="src" src="src/libusb-compat-0.1.7-150400.14.2.1.src.rpm">
          <filename>libusb-compat-0.1.7-150400.14.2.1.src.rpm</filename>
        </package>
        <package name="libusb-compat-devel" epoch="0" version="0.1.7" release="150400.14.2.1" arch="x86_64" src="x86_64/libusb-compat-devel-0.1.7-150400.14.2.1.x86_64.rpm">
          <filename>libusb-compat-devel-0.1.7-150400.14.2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4388</id>
    <title>Security update for postgresql16</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765546613"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253332" id="1253332" title="VUL-0: CVE-2025-12817: postgresql: missing check for CREATE privileges on the schema in CREATE STATISTICS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253333" id="1253333" title="VUL-0: CVE-2025-12818: postgresql: integer overflow in allocation-size calculations within libpq" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12817" id="CVE-2025-12817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12818" id="CVE-2025-12818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12818" type="cve"/>
    </references>
    <description>This update for postgresql16 fixes the following issues:

Upgraded to 16.11:

- CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332)
- CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq (bsc#1253333)
  
Other fixes:

- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.
- Sync spec file from version 18.
</description>
    <pkglist>
      <collection>
        <package name="postgresql16" epoch="0" version="16.11" release="150600.16.25.1" arch="src" src="src/postgresql16-16.11-150600.16.25.1.src.rpm">
          <filename>postgresql16-16.11-150600.16.25.1.src.rpm</filename>
        </package>
        <package name="postgresql16" epoch="0" version="16.11" release="150600.16.25.1" arch="x86_64" src="x86_64/postgresql16-16.11-150600.16.25.1.x86_64.rpm">
          <filename>postgresql16-16.11-150600.16.25.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server" epoch="0" version="16.11" release="150600.16.25.1" arch="x86_64" src="x86_64/postgresql16-server-16.11-150600.16.25.1.x86_64.rpm">
          <filename>postgresql16-server-16.11-150600.16.25.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server-devel" epoch="0" version="16.11" release="150600.16.25.1" arch="x86_64" src="x86_64/postgresql16-server-devel-16.11-150600.16.25.1.x86_64.rpm">
          <filename>postgresql16-server-devel-16.11-150600.16.25.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4363</id>
    <title>Security update for postgresql17, postgresql18</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765447853"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253333" id="1253333" title="VUL-0: CVE-2025-12818: postgresql: integer overflow in allocation-size calculations within libpq" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12818" id="CVE-2025-12818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12818" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253332" id="1253332" title="VUL-0: CVE-2025-12817: postgresql: missing check for CREATE privileges on the schema in CREATE STATISTICS" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12817" id="CVE-2025-12817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12817" type="cve"/>
    </references>
    <description>This update for postgresql17, postgresql18 fixes the following issues:

Changes in postgresql18:

- Fix build with uring for post SLE15 code streams.

Update to 18.1:

  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.

- pg_config --libs returns -lnuma so we need to require it.

Update to 18.0:

  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html


Changes in postgresql17:

Update to 17.7:

  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/17.7/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.

- switch library to pg 18
</description>
    <pkglist>
      <collection>
        <package name="libecpg6" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/libecpg6-18.1-150600.13.3.1.x86_64.rpm">
          <filename>libecpg6-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql" epoch="0" version="18" release="150700.23.3.1" arch="src" src="src/postgresql-18-150700.23.3.1.src.rpm">
          <filename>postgresql-18-150700.23.3.1.src.rpm</filename>
        </package>
        <package name="postgresql-contrib" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-contrib-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-contrib-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-devel" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-devel-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-devel-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-docs" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-docs-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-docs-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-plperl" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-plperl-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-plperl-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-plpython" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-plpython-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-plpython-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-pltcl" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-pltcl-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-pltcl-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-server" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-server-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-server-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql-server-devel" epoch="0" version="18" release="150700.23.3.1" arch="noarch" src="noarch/postgresql-server-devel-18-150700.23.3.1.noarch.rpm">
          <filename>postgresql-server-devel-18-150700.23.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql17" epoch="0" version="17.7" release="150600.13.19.1" arch="src" src="src/postgresql17-17.7-150600.13.19.1.src.rpm">
          <filename>postgresql17-17.7-150600.13.19.1.src.rpm</filename>
        </package>
        <package name="postgresql17-contrib" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-contrib-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-contrib-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-devel" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-devel-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-devel-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-docs" epoch="0" version="17.7" release="150600.13.19.1" arch="noarch" src="noarch/postgresql17-docs-17.7-150600.13.19.1.noarch.rpm">
          <filename>postgresql17-docs-17.7-150600.13.19.1.noarch.rpm</filename>
        </package>
        <package name="postgresql17-plperl" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-plperl-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-plperl-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-plpython" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-plpython-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-plpython-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pltcl" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-pltcl-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-pltcl-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-server-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-server-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server-devel" epoch="0" version="17.7" release="150600.13.19.1" arch="x86_64" src="x86_64/postgresql17-server-devel-17.7-150600.13.19.1.x86_64.rpm">
          <filename>postgresql17-server-devel-17.7-150600.13.19.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18" epoch="0" version="18.1" release="150600.13.3.1" arch="src" src="src/postgresql18-18.1-150600.13.3.1.src.rpm">
          <filename>postgresql18-18.1-150600.13.3.1.src.rpm</filename>
        </package>
        <package name="postgresql18-contrib" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-contrib-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-contrib-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-devel" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-devel-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-devel-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-docs" epoch="0" version="18.1" release="150600.13.3.1" arch="noarch" src="noarch/postgresql18-docs-18.1-150600.13.3.1.noarch.rpm">
          <filename>postgresql18-docs-18.1-150600.13.3.1.noarch.rpm</filename>
        </package>
        <package name="postgresql18-plperl" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-plperl-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-plperl-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-plpython" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-plpython-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-plpython-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-pltcl" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-pltcl-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-pltcl-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-server" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-server-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-server-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-server-devel" epoch="0" version="18.1" release="150600.13.3.1" arch="x86_64" src="x86_64/postgresql18-server-devel-18.1-150600.13.3.1.x86_64.rpm">
          <filename>postgresql18-server-devel-18.1-150600.13.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4497</id>
    <title>Recommended update for rmt-server</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1766156318"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246976" id="1246976" title="RMT does not correctly mirror custom repos that have repodata that uses xz compression" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253953" id="1253953" title="VUL-0: CVE-2025-61780: rmt-server: improper handling of headers in `Rack::Sendfile` allows for bypass of proxy-level access restrictions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248869" id="1248869" title="exporter-common package adds example.rb file breaking rmt-server because gce.rb engine also exists" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248510" id="1248510" title="LTSS registry container access is denied" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251937" id="1251937" title="VUL-0: CVE-2025-61919: rmt-server: rack: application/x-www-form-urlencoded`, calling `rack.input.read(nil)` without enforcing a length or cap" type="bugzilla"/>
    </references>
    <description>This update for rmt-server contains the following fixes:

- Version 2.24:
  * Enable mirroring xz compressed repositories. (bsc#1246976)
  * Rack 2.2.20 security update. (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
    * Do not decode instance data coming from the system; (bsc#1248510)
    * Include Live-Patching for SLES 15.X. (jsc#PCT-630)
    * Handle only one data exporter. (bsc#1248869)
    * Do not decode instance data from db to access registry. (bsc#1248510)
    * Handle instance verification exceptions
</description>
    <pkglist>
      <collection>
        <package name="rmt-server" epoch="0" version="2.24" release="150700.3.9.3" arch="src" src="src/rmt-server-2.24-150700.3.9.3.src.rpm">
          <filename>rmt-server-2.24-150700.3.9.3.src.rpm</filename>
        </package>
        <package name="rmt-server" epoch="0" version="2.24" release="150700.3.9.3" arch="x86_64" src="x86_64/rmt-server-2.24-150700.3.9.3.x86_64.rpm">
          <filename>rmt-server-2.24-150700.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="rmt-server-config" epoch="0" version="2.24" release="150700.3.9.3" arch="x86_64" src="x86_64/rmt-server-config-2.24-150700.3.9.3.x86_64.rpm">
          <filename>rmt-server-config-2.24-150700.3.9.3.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4418</id>
    <title>Recommended update for openCryptoki</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765902189"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254422" id="1254422" title="SLES 16.0 - Opencryptoki attribute bound tests fail with CKR_ATTRIBUTE_TYPE_INVALID with ep11 token on z17" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-3361" id="PED-3361" title="https://jira.suse.com/browse/PED-3361" type="jira"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

- Upgrade openCryptoki to 3.26 (bsc#1254422)
    * Soft: Add support for RSA keys up to 16K bits.
    * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
    * p11sak: Add support for generating RSA keys up to 16K bits.
    * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism
    * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms CKM_SHAxxx_KEY_GEN.
    * p11sak: Add support for SHA-HMAC key types and key generation.
    * p11sak: Add support for key wrap and unwrap commands to export and import private 
      and secret keys by means of key wrapping/unwrapping with various key wrapping mechanism.
    * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider.
    * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files.
    * Add support for canceling an operation via NULL mechanism pointer at 
      C_XxxInit() call as an alternative to C_SessionCancel() (PKCS#11 v3.0).
    * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using 
      CKM_IBM_ECDSA_OTHER and signature/public key aggregation using CKM_IBM_EC_AGGREGATE.
    * p11sak: Add support for generating BLS12-381 EC keys.
    * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms
    * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms
    * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms
    * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types.
    * Bug fixes. 
- Upgrade openCryptoki to version 3.25 (jsc#PED-3361)
    * ICA/Soft: Add support for PKCS#11 v3.0 SHAKE key derivation
    * EP11: Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * EP11: Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * EP11: Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * CCA: Add support for CCA AES CIPHER secure key types
    * CCA: Add support for the CKM_ECDH1_DERIVE mechanism
    * Soft/ICA: Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * CCA/Soft/ICA: Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Soft/ICA: Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * ICA: Report mechanisms dependent on if libica is in FIPS mode
    * P11KMIP: Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * EP11: Add support for opaque secure key blob import via C_CreateObject
    * Soft/ICA: Add support for key wrapping with AES-GCM
    * CCA: Add support for newer CCA versions on s390x and non-s390x platforms
    * CCA: Add support for CKM_AES_GCM (single-part operations only)
    * Bug fixes 
- Amended the .spec file
</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.6.1" arch="src" src="src/openCryptoki-3.26.0-150700.5.6.1.src.rpm">
          <filename>openCryptoki-3.26.0-150700.5.6.1.src.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.6.1" arch="x86_64" src="x86_64/openCryptoki-3.26.0-150700.5.6.1.x86_64.rpm">
          <filename>openCryptoki-3.26.0-150700.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-64bit" epoch="0" version="3.26.0" release="150700.5.6.1" arch="x86_64" src="x86_64/openCryptoki-64bit-3.26.0-150700.5.6.1.x86_64.rpm">
          <filename>openCryptoki-64bit-3.26.0-150700.5.6.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-devel" epoch="0" version="3.26.0" release="150700.5.6.1" arch="x86_64" src="x86_64/openCryptoki-devel-3.26.0-150700.5.6.1.x86_64.rpm">
          <filename>openCryptoki-devel-3.26.0-150700.5.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-2</id>
    <title>Recommended update for pgaudit</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767349727"/>
    <references/>
    <description>This update for pgaudit fixes the following issues:

Added support for pg 18 by adding the 18.0 version

  - bug fixes:
    - Error when required hooks are skipped.

  - Improvements:

    - SELECT FOR UPDATE object logging improvement.
    - Disable logging in parallel workers.
    - Use strpbrk() instead of strstr() where applicable.
    - Fix search_path for trigger functions.
    - Minor code optimizations.

  - Features:

    - PostgreSQL 18 support.
</description>
    <pkglist>
      <collection>
        <package name="postgresql17-pgaudit" epoch="0" version="17.1" release="150600.13.13.1" arch="src" src="src/postgresql17-pgaudit-17.1-150600.13.13.1.src.rpm">
          <filename>postgresql17-pgaudit-17.1-150600.13.13.1.src.rpm</filename>
        </package>
        <package name="postgresql17-pgaudit" epoch="0" version="17.1" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql17-pgaudit-17.1-150600.13.13.1.x86_64.rpm">
          <filename>postgresql17-pgaudit-17.1-150600.13.13.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-pgaudit" epoch="0" version="18.0" release="150600.13.13.1" arch="src" src="src/postgresql18-pgaudit-18.0-150600.13.13.1.src.rpm">
          <filename>postgresql18-pgaudit-18.0-150600.13.13.1.src.rpm</filename>
        </package>
        <package name="postgresql18-pgaudit" epoch="0" version="18.0" release="150600.13.13.1" arch="x86_64" src="x86_64/postgresql18-pgaudit-18.0-150600.13.13.1.x86_64.rpm">
          <filename>postgresql18-pgaudit-18.0-150600.13.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-3</id>
    <title>Recommended update for pgvector</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767349857"/>
    <references/>
    <description>This update for pgvector fixes the following issues:

- enable postgresql 18

pgvector was updated to 0.8.1:

* Added support for Postgres 18 rc1
* Improved performance of `binary_quantize` function

- Update to 0.7.0</description>
    <pkglist>
      <collection>
        <package name="pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="src" src="src/pgvector-0.8.1-150600.13.6.1.src.rpm">
          <filename>pgvector-0.8.1-150600.13.6.1.src.rpm</filename>
        </package>
        <package name="pgvector-devel" epoch="0" version="0.8.1" release="150600.13.6.1" arch="x86_64" src="x86_64/pgvector-devel-0.8.1-150600.13.6.1.x86_64.rpm">
          <filename>pgvector-devel-0.8.1-150600.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="src" src="src/postgresql16-pgvector-0.8.1-150600.13.6.1.src.rpm">
          <filename>postgresql16-pgvector-0.8.1-150600.13.6.1.src.rpm</filename>
        </package>
        <package name="postgresql16-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="x86_64" src="x86_64/postgresql16-pgvector-0.8.1-150600.13.6.1.x86_64.rpm">
          <filename>postgresql16-pgvector-0.8.1-150600.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="src" src="src/postgresql17-pgvector-0.8.1-150600.13.6.1.src.rpm">
          <filename>postgresql17-pgvector-0.8.1-150600.13.6.1.src.rpm</filename>
        </package>
        <package name="postgresql17-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="x86_64" src="x86_64/postgresql17-pgvector-0.8.1-150600.13.6.1.x86_64.rpm">
          <filename>postgresql17-pgvector-0.8.1-150600.13.6.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="src" src="src/postgresql18-pgvector-0.8.1-150600.13.6.1.src.rpm">
          <filename>postgresql18-pgvector-0.8.1-150600.13.6.1.src.rpm</filename>
        </package>
        <package name="postgresql18-pgvector" epoch="0" version="0.8.1" release="150600.13.6.1" arch="x86_64" src="x86_64/postgresql18-pgvector-0.8.1-150600.13.6.1.x86_64.rpm">
          <filename>postgresql18-pgvector-0.8.1-150600.13.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4438</id>
    <title>Security update for mariadb</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1765986231"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13699" id="CVE-2025-13699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13699" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254313" id="1254313" title="VUL-0: CVE-2025-13699: mariadb,mariadb-100: MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252162" id="1252162" title="Please fix the %licence tag for mariadb" type="bugzilla"/>
    </references>
    <description>This update for mariadb fixes the following issues:

- CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to
  Path Traversal and Remote Code Execution (bsc#1254313)

Other fixes:

- Updated to 11.8.5
    
- Added %license tags to license files (bsc#1252162)
    
- Added INSTALL_DOCREADMEDIR cmake flag to install readme and license files
</description>
    <pkglist>
      <collection>
        <package name="libmariadbd-devel" epoch="0" version="11.8.5" release="150700.3.9.1" arch="x86_64" src="x86_64/libmariadbd-devel-11.8.5-150700.3.9.1.x86_64.rpm">
          <filename>libmariadbd-devel-11.8.5-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libmariadbd19" epoch="0" version="11.8.5" release="150700.3.9.1" arch="x86_64" src="x86_64/libmariadbd19-11.8.5-150700.3.9.1.x86_64.rpm">
          <filename>libmariadbd19-11.8.5-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.5" release="150700.3.9.1" arch="src" src="src/mariadb-11.8.5-150700.3.9.1.src.rpm">
          <filename>mariadb-11.8.5-150700.3.9.1.src.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.5" release="150700.3.9.1" arch="x86_64" src="x86_64/mariadb-11.8.5-150700.3.9.1.x86_64.rpm">
          <filename>mariadb-11.8.5-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-client" epoch="0" version="11.8.5" release="150700.3.9.1" arch="x86_64" src="x86_64/mariadb-client-11.8.5-150700.3.9.1.x86_64.rpm">
          <filename>mariadb-client-11.8.5-150700.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-errormessages" epoch="0" version="11.8.5" release="150700.3.9.1" arch="noarch" src="noarch/mariadb-errormessages-11.8.5-150700.3.9.1.noarch.rpm">
          <filename>mariadb-errormessages-11.8.5-150700.3.9.1.noarch.rpm</filename>
        </package>
        <package name="mariadb-tools" epoch="0" version="11.8.5" release="150700.3.9.1" arch="x86_64" src="x86_64/mariadb-tools-11.8.5-150700.3.9.1.x86_64.rpm">
          <filename>mariadb-tools-11.8.5-150700.3.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4518</id>
    <title>Security update for apache2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1766516865"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254511" id="1254511" title="VUL-0: CVE-2025-55753: apache2: Apache HTTP Server: mod_md (ACME), unintended retry intervals" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254514" id="1254514" title="VUL-0: CVE-2025-65082: apache2: Apache HTTP Server: CGI environment variable override" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254512" id="1254512" title="VUL-0: CVE-2025-58098: apache2: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=..." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254515" id="1254515" title="VUL-0: CVE-2025-66200: apache2: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753" id="CVE-2025-55753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098" id="CVE-2025-58098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200" id="CVE-2025-66200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082" id="CVE-2025-65082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082" type="cve"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511)
- CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514)
- CVE-2025-58098: Fixed Server Side Includes adding query string to #exec cmd=... (bsc#1254512)
- CVE-2025-66200: Fixed mod_userdir+suexec bypass via AllowOverride FileInfo (bsc#1254515)
</description>
    <pkglist>
      <collection>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.9.1" arch="src" src="src/apache2-devel-2.4.62-150700.4.9.1.src.rpm">
          <filename>apache2-devel-2.4.62-150700.4.9.1.src.rpm</filename>
        </package>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.9.1" arch="x86_64" src="x86_64/apache2-devel-2.4.62-150700.4.9.1.x86_64.rpm">
          <filename>apache2-devel-2.4.62-150700.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.9.1" arch="src" src="src/apache2-utils-2.4.62-150700.4.9.1.src.rpm">
          <filename>apache2-utils-2.4.62-150700.4.9.1.src.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.9.1" arch="x86_64" src="x86_64/apache2-utils-2.4.62-150700.4.9.1.x86_64.rpm">
          <filename>apache2-utils-2.4.62-150700.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.9.1" arch="src" src="src/apache2-worker-2.4.62-150700.4.9.1.src.rpm">
          <filename>apache2-worker-2.4.62-150700.4.9.1.src.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.9.1" arch="x86_64" src="x86_64/apache2-worker-2.4.62-150700.4.9.1.x86_64.rpm">
          <filename>apache2-worker-2.4.62-150700.4.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-19</id>
    <title>Security update for apache2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767611213"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254515" id="1254515" title="VUL-0: CVE-2025-66200: apache2: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254511" id="1254511" title="VUL-0: CVE-2025-55753: apache2: Apache HTTP Server: mod_md (ACME), unintended retry intervals" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254514" id="1254514" title="VUL-0: CVE-2025-65082: apache2: Apache HTTP Server: CGI environment variable override" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254512" id="1254512" title="VUL-0: CVE-2025-58098: apache2: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=..." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098" id="CVE-2025-58098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58098" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200" id="CVE-2025-66200" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66200" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082" id="CVE-2025-65082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65082" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753" id="CVE-2025-55753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55753" type="cve"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511)
- CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514)
- CVE-2025-58098: Fixed Server Side Includes adding query string to #exec cmd=... (bsc#1254512)
- CVE-2025-66200: Fixed mod_userdir+suexec bypass via AllowOverride FileInfo (bsc#1254515)
</description>
    <pkglist>
      <collection>
        <package name="apache2" epoch="0" version="2.4.51" release="150400.6.52.1" arch="src" src="src/apache2-2.4.51-150400.6.52.1.src.rpm">
          <filename>apache2-2.4.51-150400.6.52.1.src.rpm</filename>
        </package>
        <package name="apache2-doc" epoch="0" version="2.4.51" release="150400.6.52.1" arch="noarch" src="noarch/apache2-doc-2.4.51-150400.6.52.1.noarch.rpm">
          <filename>apache2-doc-2.4.51-150400.6.52.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2025-4532</id>
    <title>Security update for apache2-mod_auth_openidc</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767016444"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248806" id="1248806" title="HTTP 400 after session expiry with Microsoft Entra ID on mod_auth_openidc 2.3.8" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-14130" id="PED-14130" title="https://jira.suse.com/browse/PED-14130" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31492" id="CVE-2025-31492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23527" id="CVE-2022-23527" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23527" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14857" id="CVE-2019-14857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14857" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28625" id="CVE-2023-28625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28625" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32785" id="CVE-2021-32785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32785" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20479" id="CVE-2019-20479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20479" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32792" id="CVE-2021-32792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32792" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32786" id="CVE-2021-32786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32786" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24814" id="CVE-2024-24814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24814" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3891" id="CVE-2025-3891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3891" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32791" id="CVE-2021-32791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32791" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39191" id="CVE-2021-39191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39191" type="cve"/>
    </references>
    <description>This update for apache2-mod_auth_openidc fixes the following issues:

- Update to 2.4.17.1 (bsc#1248806 / PED-14130).
- Remove many patches, as they've been merged upstream.
  </description>
    <pkglist>
      <collection>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.4.17.1" release="150600.16.14.1" arch="src" src="src/apache2-mod_auth_openidc-2.4.17.1-150600.16.14.1.src.rpm">
          <filename>apache2-mod_auth_openidc-2.4.17.1-150600.16.14.1.src.rpm</filename>
        </package>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.4.17.1" release="150600.16.14.1" arch="x86_64" src="x86_64/apache2-mod_auth_openidc-2.4.17.1-150600.16.14.1.x86_64.rpm">
          <filename>apache2-mod_auth_openidc-2.4.17.1-150600.16.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-288</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769418286"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253002" id="1253002" title="VUL-0: CVE-2025-12464: qemu: net: pad packets to minimum length in qemu_receive_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252768" id="1252768" title="qemu-system-x86 exists with SIGSEV while installing SLES16 via remote ISO image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254286" id="1254286" title="cockpit - Virtual machines - Import VM - import qcow2 image failed and it fails to start because of missing 'qemu-hw-display-virtio-gpu' and 'qemu-hw-display-virtio-gpu-pci'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230042" id="1230042" title="[SLM6.2][PPC64LE] Fail to start QEMU - qemu-system-ppc64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250984" id="1250984" title="VUL-0: CVE-2025-11234: qemu: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254494" id="1254494" title="glusterfs: drop 32-bit architectures" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" id="CVE-2025-12464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" id="CVE-2025-11234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious
  guest user to crash the QEMU process on the host (bsc#1253002).
- CVE-2025-11234: use-after-free in WebSocket handshake operations can be exploited by a malicious client with network
  access to the VNC WebSocket port to cause a denial-of-service (bsc#1250984).

Other updates and bugfixes:

- [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too.
- [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494).
- [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286).
- block/curl: fix curl internal handles handling (bsc#1252768).
- [openSUSE][RPM] spec: qemu-vgabios is required on ppc (bsc#1230042).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.11.1" arch="src" src="src/qemu-9.2.4-150700.3.11.1.src.rpm">
          <filename>qemu-9.2.4-150700.3.11.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-alsa" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-audio-alsa-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-audio-alsa-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-dbus" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-audio-dbus-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-audio-dbus-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pa" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-audio-pa-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-audio-pa-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pipewire" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-audio-pipewire-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-audio-pipewire-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-audio-spice-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-audio-spice-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-block-curl-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-block-curl-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-block-iscsi-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-block-iscsi-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-nfs" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-block-nfs-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-block-nfs-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-block-rbd-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-block-rbd-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-block-ssh-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-block-ssh-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-baum" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-chardev-baum-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-chardev-baum-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-chardev-spice-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-chardev-spice-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-guest-agent-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-guest-agent-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-headless" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-headless-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-headless-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="9.2.4" release="150700.3.11.1" arch="noarch" src="noarch/qemu-ipxe-9.2.4-150700.3.11.1.noarch.rpm">
          <filename>qemu-ipxe-9.2.4-150700.3.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ksm-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ksm-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="9.2.4" release="150700.3.11.1" arch="noarch" src="noarch/qemu-lang-9.2.4-150700.3.11.1.noarch.rpm">
          <filename>qemu-lang-9.2.4-150700.3.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.11.1" arch="noarch" src="noarch/qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.11.1.noarch.rpm">
          <filename>qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-spice" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-spice-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-spice-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-curses" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-curses-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-curses-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-dbus" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-dbus-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-dbus-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-gtk" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-gtk-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-gtk-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-opengl-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-opengl-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-app" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-spice-app-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-spice-app-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.11.1" arch="noarch" src="noarch/qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.11.1.noarch.rpm">
          <filename>qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.11.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="9.2.4" release="150700.3.11.1" arch="x86_64" src="x86_64/qemu-x86-9.2.4-150700.3.11.1.x86_64.rpm">
          <filename>qemu-x86-9.2.4-150700.3.11.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-39</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767695475"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227397" id="1227397" title="VUL-0: CVE-2024-6505: qemu: qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253002" id="1253002" title="VUL-0: CVE-2025-12464: qemu: net: pad packets to minimum length in qemu_receive_packet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254286" id="1254286" title="cockpit - Virtual machines - Import VM - import qcow2 image failed and it fails to start because of missing 'qemu-hw-display-virtio-gpu' and 'qemu-hw-display-virtio-gpu-pci'" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250984" id="1250984" title="VUL-0: CVE-2025-11234: qemu: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252768" id="1252768" title="qemu-system-x86 exists with SIGSEV while installing SLES16 via remote ISO image" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" id="CVE-2025-12464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6505" id="CVE-2024-6505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" id="CVE-2025-11234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2024-6505: qemu-kvm: virtio-net: Fixed queue index 
  out-of-bounds access in software RSS (bsc#1227397)
- CVE-2025-12464: net: pad packets to minimum length in 
  qemu_receive_packet() (bsc#1253002)
- CVE-2025-11234: qemu-kvm: Fixed use-after-free in websocket 
  handshake code leading to denial of service (bsc#1250984)

Other fixes:
- Fixed *-virtio-gpu-pci dependency on ARM (bsc#1254286)
- block/curl: Fixed curl internal handles handling (bsc#1252768)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.36.2" arch="src" src="src/qemu-7.1.0-150500.49.36.2.src.rpm">
          <filename>qemu-7.1.0-150500.49.36.2.src.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.36.2" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.36.2.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.36.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-60</id>
    <title>Security update for capstone</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767801774"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255310" id="1255310" title="VUL-0: CVE-2025-68114: capstone: Unchecked vsnprintf return in SStream_concat allows stack buffer underflow&amp;overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255309" id="1255309" title="VUL-0: CVE-2025-67873: capstone: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114" id="CVE-2025-68114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873" id="CVE-2025-67873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873" type="cve"/>
    </references>
    <description>This update for capstone fixes the following issues:

Security issues fixed: 

- CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow
  (bsc#1255309).
- CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer overflow (bsc#1255310).

Other updates and bugfixes:

- Enable static library, and add `libcapstone-devel-static` subpackage.
</description>
    <pkglist>
      <collection>
        <package name="capstone" epoch="0" version="4.0.2" release="150500.3.3.1" arch="src" src="src/capstone-4.0.2-150500.3.3.1.src.rpm">
          <filename>capstone-4.0.2-150500.3.3.1.src.rpm</filename>
        </package>
        <package name="libcapstone-devel" epoch="0" version="4.0.2" release="150500.3.3.1" arch="x86_64" src="x86_64/libcapstone-devel-4.0.2-150500.3.3.1.x86_64.rpm">
          <filename>libcapstone-devel-4.0.2-150500.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libcapstone4" epoch="0" version="4.0.2" release="150500.3.3.1" arch="x86_64" src="x86_64/libcapstone4-4.0.2-150500.3.3.1.x86_64.rpm">
          <filename>libcapstone4-4.0.2-150500.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-23</id>
    <title>Security update for erlang26</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1767614791"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249472" id="1249472" title="VUL-0: CVE-2025-48040: erlang: Erlang Excessive Resource Consumption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249469" id="1249469" title="VUL-0: CVE-2025-48039: erlang: Erlang Excessive Use of System Resources" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249470" id="1249470" title="VUL-0: CVE-2025-48038: erlang: Erlang Excessive Use of System Resources" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48040" id="CVE-2025-48040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48040" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48038" id="CVE-2025-48038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48039" id="CVE-2025-48039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48039" type="cve"/>
    </references>
    <description>This update for erlang26 fixes the following issues:

- CVE-2025-48040: Excessive Resource Consumption (bsc#1249472)
- CVE-2025-48039: Excessive Use of System Resources (bsc#1249469)
- CVE-2025-48038: Excessive Use of System Resources (bsc#1249470)
</description>
    <pkglist>
      <collection>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.22.1" arch="src" src="src/erlang26-26.2.1-150300.7.22.1.src.rpm">
          <filename>erlang26-26.2.1-150300.7.22.1.src.rpm</filename>
        </package>
        <package name="erlang26" epoch="0" version="26.2.1" release="150300.7.22.1" arch="x86_64" src="x86_64/erlang26-26.2.1-150300.7.22.1.x86_64.rpm">
          <filename>erlang26-26.2.1-150300.7.22.1.x86_64.rpm</filename>
        </package>
        <package name="erlang26-epmd" epoch="0" version="26.2.1" release="150300.7.22.1" arch="x86_64" src="x86_64/erlang26-epmd-26.2.1-150300.7.22.1.x86_64.rpm">
          <filename>erlang26-epmd-26.2.1-150300.7.22.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-279</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769180945"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13193" id="CVE-2025-13193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13193" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12748" id="CVE-2025-12748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12748" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253703" id="1253703" title="VUL-0: CVE-2025-13193: libvirt: Information disclosure via world-readable VM snapshots" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253278" id="1253278" title="VUL-0: CVE-2025-12748: libvirt: Denial of service in XML parsing" type="bugzilla"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703)
- CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.13.1" arch="src" src="src/libvirt-11.0.0-150700.4.13.1.src.rpm">
          <filename>libvirt-11.0.0-150700.4.13.1.src.rpm</filename>
        </package>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-client-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-client-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-client-qemu-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-client-qemu-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-common-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-common-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-nwfilter" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-config-nwfilter-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-config-nwfilter-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-libxl" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-libxl-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-libxl-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-log-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-log-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-sanlock-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-xen" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-daemon-xen-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-daemon-xen-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-devel-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-devel-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" epoch="0" version="11.0.0" release="150700.4.13.1" arch="noarch" src="noarch/libvirt-doc-11.0.0-150700.4.13.1.noarch.rpm">
          <filename>libvirt-doc-11.0.0-150700.4.13.1.noarch.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="11.0.0" release="150700.4.13.1" arch="x86_64" src="x86_64/libvirt-nss-11.0.0-150700.4.13.1.x86_64.rpm">
          <filename>libvirt-nss-11.0.0-150700.4.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-230</id>
    <title>Security update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769084560"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254666" id="1254666" title="VUL-0: CVE-2025-14104: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104" id="CVE-2025-14104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-13682" id="PED-13682" title="https://jira.suse.com/browse/PED-13682" type="jira"/>
    </references>
    <description>This update for util-linux fixes the following issues:

- CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666).
- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
</description>
    <pkglist>
      <collection>
        <package name="util-linux-systemd" epoch="0" version="2.40.4" release="150700.4.3.1" arch="src" src="src/util-linux-systemd-2.40.4-150700.4.3.1.src.rpm">
          <filename>util-linux-systemd-2.40.4-150700.4.3.1.src.rpm</filename>
        </package>
        <package name="uuidd" epoch="0" version="2.40.4" release="150700.4.3.1" arch="x86_64" src="x86_64/uuidd-2.40.4-150700.4.3.1.x86_64.rpm">
          <filename>uuidd-2.40.4-150700.4.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-256</id>
    <title>Security update for openldap2_5</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769098142"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256297" id="1256297" title="VUL-0: CVE-2026-22185: openldap: Denial of Service and Information Disclosure via Heap Buffer Underflow" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22185" id="CVE-2026-22185" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22185" type="cve"/>
    </references>
    <description>This update for openldap2_5 fixes the following issues:

Security fixes:
  
- CVE-2026-22185: Fixed possible crash in malicious DB (bsc#1256297)
  
Other fixes:

- Update to version 2.5.20+11:
    
    * ITS#10421 mdb_load: check for malicious input
</description>
    <pkglist>
      <collection>
        <package name="openldap2_5" epoch="0" version="2.5.20+11" release="150500.11.38.1" arch="src" src="src/openldap2_5-2.5.20+11-150500.11.38.1.src.rpm">
          <filename>openldap2_5-2.5.20+11-150500.11.38.1.src.rpm</filename>
        </package>
        <package name="openldap2_5" epoch="0" version="2.5.20+11" release="150500.11.38.1" arch="x86_64" src="x86_64/openldap2_5-2.5.20+11-150500.11.38.1.x86_64.rpm">
          <filename>openldap2_5-2.5.20+11-150500.11.38.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2_5-contrib" epoch="0" version="2.5.20+11" release="150500.11.38.1" arch="x86_64" src="x86_64/openldap2_5-contrib-2.5.20+11-150500.11.38.1.x86_64.rpm">
          <filename>openldap2_5-contrib-2.5.20+11-150500.11.38.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2_5-ppolicy-check-password" epoch="0" version="2.5.20+11" release="150500.11.38.1" arch="x86_64" src="x86_64/openldap2_5-ppolicy-check-password-2.5.20+11-150500.11.38.1.x86_64.rpm">
          <filename>openldap2_5-ppolicy-check-password-2.5.20+11-150500.11.38.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-241</id>
    <title>Recommended update for libHBAAPI2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769090224"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252158" id="1252158" title="Please fix the %licence tag for libHBAAPI2" type="bugzilla"/>
    </references>
    <description>This update for libHBAAPI2 fixes the following issues:

- use %license tag for COPYING [bsc#1252158]
</description>
    <pkglist>
      <collection>
        <package name="libHBAAPI2" epoch="0" version="2.2.10" release="150000.3.3.1" arch="src" src="src/libHBAAPI2-2.2.10-150000.3.3.1.src.rpm">
          <filename>libHBAAPI2-2.2.10-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libHBAAPI2-devel" epoch="0" version="2.2.10" release="150000.3.3.1" arch="x86_64" src="x86_64/libHBAAPI2-devel-2.2.10-150000.3.3.1.x86_64.rpm">
          <filename>libHBAAPI2-devel-2.2.10-150000.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-238</id>
    <title>Security update for dpdk</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769084786"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23259" id="CVE-2025-23259" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23259" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254161" id="1254161" title="VUL-0: CVE-2025-23259: dpdk: an attacker on a VM in the system can cause information disclosure and denial of service" type="bugzilla"/>
    </references>
    <description>This update for dpdk fixes the following issues:

Update to version 24.11.4:
  
- CVE-2025-23259: Fixed an attacker on a VM in the system can cause information disclosure and denial of service (bsc#1254161).

Changelog:

https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id5
</description>
    <pkglist>
      <collection>
        <package name="dpdk" epoch="0" version="24.11.4" release="150700.3.6.1" arch="src" src="src/dpdk-24.11.4-150700.3.6.1.src.rpm">
          <filename>dpdk-24.11.4-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="dpdk" epoch="0" version="24.11.4" release="150700.3.6.1" arch="x86_64" src="x86_64/dpdk-24.11.4-150700.3.6.1.x86_64.rpm">
          <filename>dpdk-24.11.4-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-devel" epoch="0" version="24.11.4" release="150700.3.6.1" arch="x86_64" src="x86_64/dpdk-devel-24.11.4-150700.3.6.1.x86_64.rpm">
          <filename>dpdk-devel-24.11.4-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-tools" epoch="0" version="24.11.4" release="150700.3.6.1" arch="x86_64" src="x86_64/dpdk-tools-24.11.4-150700.3.6.1.x86_64.rpm">
          <filename>dpdk-tools-24.11.4-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-25" epoch="0" version="24.11.4" release="150700.3.6.1" arch="x86_64" src="x86_64/libdpdk-25-24.11.4-150700.3.6.1.x86_64.rpm">
          <filename>libdpdk-25-24.11.4-150700.3.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-250</id>
    <title>Recommended update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769095542"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-13646" id="PED-13646" title="https://jira.suse.com/browse/PED-13646" type="jira"/>
    </references>
    <description>This update for openvswitch fixes the following issues:

- OVN update to version 25.03.2 (jsc#PED-13646):
    * Bug fixes
    * Dynamic Routing:
        + Add the option &quot;dynamic-routing-redistribute-local-only&quot; to Logical
          Routers and Logical Router Ports which refines the way in which
          chassis-specific Advertised_Routes (e.g., for NAT and LB IPs) are advertised.
        + Add the option &quot;dynamic-routing-vrf-id&quot; to Logical Routers which allows
          CMS to specify the Linux routing table id for a given vrf.
    * Add ovn-nbctl lsp-add-router-port which will create router port on specified LS.
    * Add ovn-nbctl lsp-add-localnet-port which will create localnet port on specified LS.
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_5-0" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/libopenvswitch-3_5-0-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>libopenvswitch-3_5-0-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="libovn-25_03-0" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/libovn-25_03-0-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>libovn-25_03-0-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.2" release="150700.41.9.1" arch="src" src="src/openvswitch-3.5.2-150700.41.9.1.src.rpm">
          <filename>openvswitch-3.5.2-150700.41.9.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-devel" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-devel-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-devel-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-ipsec" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-ipsec-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-ipsec-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-pki" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-pki-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-pki-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-test" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-test-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-test-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-vtep" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/openvswitch-vtep-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>openvswitch-vtep-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-central" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-central-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-central-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-devel" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-devel-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-devel-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-docker" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-docker-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-docker-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-host" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-host-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-host-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-vtep" epoch="0" version="25.03.2" release="150700.41.9.1" arch="x86_64" src="x86_64/ovn-vtep-25.03.2-150700.41.9.1.x86_64.rpm">
          <filename>ovn-vtep-25.03.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
        <package name="python3-openvswitch" epoch="0" version="3.5.2" release="150700.41.9.1" arch="x86_64" src="x86_64/python3-openvswitch-3.5.2-150700.41.9.1.x86_64.rpm">
          <filename>python3-openvswitch-3.5.2-150700.41.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-329</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769614780"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256747" id="1256747" title="VUL-0: EMBARGOED: CVE-2026-23553: xen: x86: incomplete IBPB for vCPU isolation (XSA-479)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256745" id="1256745" title="VUL-0: EMBARGOED: CVE-2025-58150: xen: x86: buffer overrun with shadow paging + tracing (XSA-477)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58150" id="CVE-2025-58150" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58150" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23553" id="CVE-2026-23553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23553" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2025-58150: Fixed buffer overrun with shadow paging and 
  tracing (XSA-477) (bsc#1256745)
- CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation 
  (XSA-479) (bsc#1256747)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.2_04" release="150700.3.22.1" arch="src" src="src/xen-4.20.2_04-150700.3.22.1.src.rpm">
          <filename>xen-4.20.2_04-150700.3.22.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen" epoch="0" version="4.20.2_04" release="150700.3.22.1" arch="x86_64" src="x86_64/xen-4.20.2_04-150700.3.22.1.x86_64.rpm">
          <filename>xen-4.20.2_04-150700.3.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.2_04" release="150700.3.22.1" arch="x86_64" src="x86_64/xen-devel-4.20.2_04-150700.3.22.1.x86_64.rpm">
          <filename>xen-devel-4.20.2_04-150700.3.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.2_04" release="150700.3.22.1" arch="x86_64" src="x86_64/xen-tools-4.20.2_04-150700.3.22.1.x86_64.rpm">
          <filename>xen-tools-4.20.2_04-150700.3.22.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.2_04" release="150700.3.22.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.2_04-150700.3.22.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.2_04-150700.3.22.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-348</id>
    <title>Security update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769771827"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13878" id="CVE-2025-13878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13878" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256997" id="1256997" title="VUL-0: CVE-2025-13878: bind: malformed BRID/HHIT records can cause named to terminate unexpectedly" type="bugzilla"/>
    </references>
    <description>This update for bind fixes the following issues:

Upgrade to release 9.20.18:

- CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records (bsc#1256997)

  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.

  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.18" release="150700.3.15.1" arch="src" src="src/bind-9.20.18-150700.3.15.1.src.rpm">
          <filename>bind-9.20.18-150700.3.15.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.18" release="150700.3.15.1" arch="x86_64" src="x86_64/bind-9.20.18-150700.3.15.1.x86_64.rpm">
          <filename>bind-9.20.18-150700.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.18" release="150700.3.15.1" arch="noarch" src="noarch/bind-doc-9.20.18-150700.3.15.1.noarch.rpm">
          <filename>bind-doc-9.20.18-150700.3.15.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-291</id>
    <title>Security update for openCryptoki</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1769425900"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256673" id="1256673" title="VUL-0: CVE-2026-22791: openCryptoki: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22791" id="CVE-2026-22791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22791" type="cve"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

- CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673).
</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.9.1" arch="src" src="src/openCryptoki-3.26.0-150700.5.9.1.src.rpm">
          <filename>openCryptoki-3.26.0-150700.5.9.1.src.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.9.1" arch="x86_64" src="x86_64/openCryptoki-3.26.0-150700.5.9.1.x86_64.rpm">
          <filename>openCryptoki-3.26.0-150700.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-64bit" epoch="0" version="3.26.0" release="150700.5.9.1" arch="x86_64" src="x86_64/openCryptoki-64bit-3.26.0-150700.5.9.1.x86_64.rpm">
          <filename>openCryptoki-64bit-3.26.0-150700.5.9.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-devel" epoch="0" version="3.26.0" release="150700.5.9.1" arch="x86_64" src="x86_64/openCryptoki-devel-3.26.0-150700.5.9.1.x86_64.rpm">
          <filename>openCryptoki-devel-3.26.0-150700.5.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-481</id>
    <title>Security update for openCryptoki</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1770912254"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257116" id="1257116" title="VUL-0: CVE-2026-23893: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23893" id="CVE-2026-23893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23893" type="cve"/>
    </references>
    <description>This update for openCryptoki fixes the following issues:

- CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).
</description>
    <pkglist>
      <collection>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.12.1" arch="src" src="src/openCryptoki-3.26.0-150700.5.12.1.src.rpm">
          <filename>openCryptoki-3.26.0-150700.5.12.1.src.rpm</filename>
        </package>
        <package name="openCryptoki" epoch="0" version="3.26.0" release="150700.5.12.1" arch="x86_64" src="x86_64/openCryptoki-3.26.0-150700.5.12.1.x86_64.rpm">
          <filename>openCryptoki-3.26.0-150700.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-64bit" epoch="0" version="3.26.0" release="150700.5.12.1" arch="x86_64" src="x86_64/openCryptoki-64bit-3.26.0-150700.5.12.1.x86_64.rpm">
          <filename>openCryptoki-64bit-3.26.0-150700.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="openCryptoki-devel" epoch="0" version="3.26.0" release="150700.5.12.1" arch="x86_64" src="x86_64/openCryptoki-devel-3.26.0-150700.5.12.1.x86_64.rpm">
          <filename>openCryptoki-devel-3.26.0-150700.5.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-636</id>
    <title>Recommended update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772020796"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-15400" id="PED-15400" title="https://jira.suse.com/browse/PED-15400" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-13062" id="PED-13062" title="https://jira.suse.com/browse/PED-13062" type="jira"/>
    </references>
    <description>This update for libvirt fixes the following issues:

- virsh: Introduce new hypervisor-cpu-models command (jsc#PED-13062)
- wireshark: Adapt to wireshark-4.6.0 (jsc#PED-15400)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.16.1" arch="src" src="src/libvirt-11.0.0-150700.4.16.1.src.rpm">
          <filename>libvirt-11.0.0-150700.4.16.1.src.rpm</filename>
        </package>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-client-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-client-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-client-qemu-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-client-qemu-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-common-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-common-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-nwfilter" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-config-nwfilter-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-config-nwfilter-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-libxl" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-libxl-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-libxl-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-log-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-log-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-sanlock-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-xen" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-daemon-xen-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-daemon-xen-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-devel-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-devel-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" epoch="0" version="11.0.0" release="150700.4.16.1" arch="noarch" src="noarch/libvirt-doc-11.0.0-150700.4.16.1.noarch.rpm">
          <filename>libvirt-doc-11.0.0-150700.4.16.1.noarch.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="11.0.0" release="150700.4.16.1" arch="x86_64" src="x86_64/libvirt-nss-11.0.0-150700.4.16.1.x86_64.rpm">
          <filename>libvirt-nss-11.0.0-150700.4.16.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-445</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1770805202"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257474" id="1257474" title="QEMU migration fails if a qemu-vdagent channel is present in the VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256484" id="1256484" title="VUL-0: CVE-2026-0665: qemu: out-of-bounds heap access can lead to a denial of service or potential memory corruption" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0665" id="CVE-2026-0665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0665" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2026-0665: Added PIRQ bounds check in xen_physdev_map_pirq to avoid an out-of-bounds heap. (bsc#1256484)

Other fixes:

- Fixed that QEMU migration fails if a qemu-vdagent channel is present in the VM (bsc#1257474)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.14.1" arch="src" src="src/qemu-9.2.4-150700.3.14.1.src.rpm">
          <filename>qemu-9.2.4-150700.3.14.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-alsa" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-audio-alsa-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-audio-alsa-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-dbus" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-audio-dbus-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-audio-dbus-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pa" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-audio-pa-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-audio-pa-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pipewire" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-audio-pipewire-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-audio-pipewire-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-audio-spice-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-audio-spice-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-block-curl-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-block-curl-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-block-iscsi-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-block-iscsi-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-nfs" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-block-nfs-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-block-nfs-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-block-rbd-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-block-rbd-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-block-ssh-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-block-ssh-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-baum" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-chardev-baum-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-chardev-baum-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-chardev-spice-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-chardev-spice-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-guest-agent-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-guest-agent-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-headless" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-headless-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-headless-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="9.2.4" release="150700.3.14.1" arch="noarch" src="noarch/qemu-ipxe-9.2.4-150700.3.14.1.noarch.rpm">
          <filename>qemu-ipxe-9.2.4-150700.3.14.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ksm-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ksm-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="9.2.4" release="150700.3.14.1" arch="noarch" src="noarch/qemu-lang-9.2.4-150700.3.14.1.noarch.rpm">
          <filename>qemu-lang-9.2.4-150700.3.14.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.14.1" arch="noarch" src="noarch/qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1.noarch.rpm">
          <filename>qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1.noarch.rpm</filename>
        </package>
        <package name="qemu-spice" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-spice-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-spice-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-curses" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-curses-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-curses-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-dbus" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-dbus-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-dbus-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-gtk" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-gtk-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-gtk-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-opengl-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-opengl-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-app" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-spice-app-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-spice-app-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.14.1" arch="noarch" src="noarch/qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1.noarch.rpm">
          <filename>qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.14.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="9.2.4" release="150700.3.14.1" arch="x86_64" src="x86_64/qemu-x86-9.2.4-150700.3.14.1.x86_64.rpm">
          <filename>qemu-x86-9.2.4-150700.3.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-677</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772183630"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254299" id="1254299" title="L3: grub-core/script/lexer.c:352:out of memory. -  thread::w2zL_17jKrqO0jB9GeJibSs::" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258022" id="1258022" title="Partner-L3: Backport GRUB commit to prevent BIOS assert" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254415" id="1254415" title="installing grub2-powerpc-ieee1275 package resets bootlist to one path/disk - thread::VGw4y0rbLY2_K0LeFar61Ss::" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Support dm multipath bootlist on PowerPC (bsc#1254415)
- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
- Fix error &quot;grub-core/script/lexer.c:352:out of memory&quot; after PowerPC CAS Reboot (bsc#1254299)
    * Fix PowerPC CAS reboot to evaluate menu context
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.26.1" arch="src" src="src/grub2-2.12-150700.19.26.1.src.rpm">
          <filename>grub2-2.12-150700.19.26.1.src.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.26.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.26.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.26.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-609</id>
    <title>Recommended update for proftpd</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1771940594"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256827" id="1256827" title="L3-Question: proftpd read-only filesystem caused by ProtectSystem=full" type="bugzilla"/>
    </references>
    <description>This update for proftpd fixes the following issues:

- Removed &quot;ProtectSystem=full&quot; from proftpd.service (bsc#1256827). 
    * That directive prevents proftpd from writing to the /usr directory hierarchy,
      which means that logged-in and properly authorized FTP users
      cannot upload files or create directories there either. 
    * This is not what system administrators who set up FTP access for local
      users expect and it's inconsistent with how others FTP servers
      like vsftpd are configured by default.
</description>
    <pkglist>
      <collection>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="src" src="src/proftpd-1.3.8b-150600.13.15.1.src.rpm">
          <filename>proftpd-1.3.8b-150600.13.15.1.src.rpm</filename>
        </package>
        <package name="proftpd" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-devel" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-devel-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-devel-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-doc" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-doc-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-doc-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-lang" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="noarch" src="noarch/proftpd-lang-1.3.8b-150600.13.15.1.noarch.rpm">
          <filename>proftpd-lang-1.3.8b-150600.13.15.1.noarch.rpm</filename>
        </package>
        <package name="proftpd-ldap" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-ldap-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-ldap-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-mysql" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-mysql-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-mysql-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-pgsql" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-pgsql-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-pgsql-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-radius" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-radius-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-radius-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
        <package name="proftpd-sqlite" epoch="0" version="1.3.8b" release="150600.13.15.1" arch="x86_64" src="x86_64/proftpd-sqlite-1.3.8b-150600.13.15.1.x86_64.rpm">
          <filename>proftpd-sqlite-1.3.8b-150600.13.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-835</id>
    <title>Recommended update for apache2</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772782042"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229147" id="1229147" title="apache2 default config gives a warning AH00317: MaxRequestWorkers of 256 is not an integer multiple of ThreadsPerChild of 25, decreasing to nearest multiple 250" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- Fix: apache2 default config gives a warning AH00317 (bsc#1229147).
    * The default value for MaxRequestWorkers should be a multiple of 25,
      so we're setting it from 256 down to 250, which is what Apache was
      doing during runtime in any case.
</description>
    <pkglist>
      <collection>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.12.1" arch="src" src="src/apache2-devel-2.4.62-150700.4.12.1.src.rpm">
          <filename>apache2-devel-2.4.62-150700.4.12.1.src.rpm</filename>
        </package>
        <package name="apache2-devel" epoch="0" version="2.4.62" release="150700.4.12.1" arch="x86_64" src="x86_64/apache2-devel-2.4.62-150700.4.12.1.x86_64.rpm">
          <filename>apache2-devel-2.4.62-150700.4.12.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.12.1" arch="src" src="src/apache2-utils-2.4.62-150700.4.12.1.src.rpm">
          <filename>apache2-utils-2.4.62-150700.4.12.1.src.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.62" release="150700.4.12.1" arch="x86_64" src="x86_64/apache2-utils-2.4.62-150700.4.12.1.x86_64.rpm">
          <filename>apache2-utils-2.4.62-150700.4.12.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.12.1" arch="src" src="src/apache2-worker-2.4.62-150700.4.12.1.src.rpm">
          <filename>apache2-worker-2.4.62-150700.4.12.1.src.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.62" release="150700.4.12.1" arch="x86_64" src="x86_64/apache2-worker-2.4.62-150700.4.12.1.x86_64.rpm">
          <filename>apache2-worker-2.4.62-150700.4.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-620</id>
    <title>Security update for snpguest</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1771950995"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242601" id="1242601" title="VUL-0: CVE-2025-3416: snpguest,snphost: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257877" id="1257877" title="[SLES16.0][snpguest]snpguest 0.9.1 Incompatible with SEV-SNP API 1.58" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243869" id="1243869" title="VUL-0: CVE-2024-12224: snpguest: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257927" id="1257927" title="VUL-0: CVE-2026-25727: snpguest: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" id="CVE-2024-12224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" id="CVE-2026-25727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" type="cve"/>
    </references>
    <description>This update for snpguest fixes the following issues:

Update to version 0.10.0.

Security issues fixed:  

- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927).
- CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242601).
- CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bcs#1243869).

Other updates and bugfixes:

- Update to version 0.10.0 

  * fails to generate attestation reports on SEV-SNP guests with firmware API (bsc#1257877).
  * chore: updating tool version to 0.10.0
  * refactor(certs): remove redundant branch in file-write logic
  * Docs: Adding verify measure, host-data, report-data to docs
  * verify: verify measurent, host data, and report data attributes from the attestation report.
  * library: Updating sev library to 7.1.0
  * ci: replace deprecated gh actions
  * feat: multi-format integer parsing for key subcommand arguments
  * chore(main): remove unused import `clap::arg`
  * feat(fetch): add fetch crl subcommand
  * .github/lint: Bump toolchain version to 1.86
  * Bump rust version to 1.86
  * feat: bumping tool to version 0.9.2
  * fix(verify): silence mismatched_lifetime_syntaxes in SnpOid::oid
  * feat: support SEV-SNP ABI Spec 1.58 (bump sev to v6.3.0)
  * docs: restore and clarify Global Options section
  * doc: fix CL argument orders + address recent changes
  * fix(hyperv): downgrade VMPL check from error to warning
  * fix(report.rs): remove conflict check between --random flag and Hyper-V
  * fix(report.rs): Decouple runtime behavior from hyperv build feature
  * refactor: clarify --platform error message
  * docs: add Azure/Hyper-V build note for --platform
  * report: Writing Req Data as Binary (#101)
  * deps: bump virtee/sev to 6.2.1 (fix TCB-serialization bug) (#99)
  * Updating SEV library to 6.1.0 and updating version to 0.9.1
  * Update version (0.9.0)
  * HyperV: Fixing report command failure on Azure confidential VM
  * Removing intird and append requirement for kernel measurements (#93)
  * Updating to version 6 of library and fixing attestation (#89)
  * CI: Fixing create_release workflow (#91)
  * Minor update (0.8.3)
  * Adding build script
  * Update preattestation.rs
  * Fix certificate fetch bug for Turin
  * Minor update
  * Update bitfield to 0.15.0
  * Update to 0.8.1
  * Update asn1-rs and x509-parser
  * Update to 0.8.0
  * key: Fix guest_field_select typo
  * Adding Turin support and updating ASK cn
</description>
    <pkglist>
      <collection>
        <package name="snpguest" epoch="0" version="0.10.0" release="150700.3.3.1" arch="src" src="src/snpguest-0.10.0-150700.3.3.1.src.rpm">
          <filename>snpguest-0.10.0-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="snpguest" epoch="0" version="0.10.0" release="150700.3.3.1" arch="x86_64" src="x86_64/snpguest-0.10.0-150700.3.3.1.x86_64.rpm">
          <filename>snpguest-0.10.0-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-881</id>
    <title>Security update for postgresql18</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773310742"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258012" id="1258012" title="VUL-0: CVE-2026-2007: postgresql: Harden contrib/pg_trgm against changes in string lowercasing behavior" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258009" id="1258009" title="VUL-0: CVE-2026-2004: postgresql: Harden selectivity estimators against being attached to operators that accept unexpected data types" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258008" id="1258008" title="VUL-0: CVE-2026-2003: postgresql: Guard against unexpected dimensions of oidvector/int2vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258011" id="1258011" title="VUL-0: CVE-2026-2006: postgresql: Fix inadequate validation of multibyte character lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258010" id="1258010" title="VUL-0: CVE-2026-2005: postgresql: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258754" id="1258754" title="PostgreSQL 2026-02 Regression Fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" id="CVE-2026-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" id="CVE-2026-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" id="CVE-2026-2005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" id="CVE-2026-2003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2007" id="CVE-2026-2007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2007" type="cve"/>
    </references>
    <description>This update for postgresql18 fixes the following issues:

Update to version 18.3 (bsc#1258754).

Security issues fixed:

- CVE-2026-2003: improper validation of type &quot;oidvector&quot; may allow disclose a few bytes of server memory (bsc#1258008).
- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code
  execution (bsc#1258009).
- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution
  (bsc#1258010).
- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution
  (bsc#1258011).
- CVE-2026-2007: pg_trgm heap buffer overflow can cause to write pattern onto server memory (bsc#1258012).
    
Regression fixes:

  - the substring() function raises an error &quot;invalid byte sequence for encoding&quot; on non-ASCII text values if the
    source of that value is a database column (caused by CVE-2026-2006 fix).
  - a standby may halt and return an error &quot;could not access status of transaction&quot;.
</description>
    <pkglist>
      <collection>
        <package name="libecpg6" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/libecpg6-18.3-150600.13.8.1.x86_64.rpm">
          <filename>libecpg6-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18" epoch="0" version="18.3" release="150600.13.8.1" arch="src" src="src/postgresql18-18.3-150600.13.8.1.src.rpm">
          <filename>postgresql18-18.3-150600.13.8.1.src.rpm</filename>
        </package>
        <package name="postgresql18-contrib" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-contrib-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-contrib-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-devel" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-devel-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-devel-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-docs" epoch="0" version="18.3" release="150600.13.8.1" arch="noarch" src="noarch/postgresql18-docs-18.3-150600.13.8.1.noarch.rpm">
          <filename>postgresql18-docs-18.3-150600.13.8.1.noarch.rpm</filename>
        </package>
        <package name="postgresql18-plperl" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-plperl-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-plperl-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-plpython" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-plpython-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-plpython-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-pltcl" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-pltcl-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-pltcl-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-server" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-server-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-server-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-server-devel" epoch="0" version="18.3" release="150600.13.8.1" arch="x86_64" src="x86_64/postgresql18-server-devel-18.3-150600.13.8.1.x86_64.rpm">
          <filename>postgresql18-server-devel-18.3-150600.13.8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-883</id>
    <title>Security update for postgresql17</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773310816"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258010" id="1258010" title="VUL-0: CVE-2026-2005: postgresql: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258011" id="1258011" title="VUL-0: CVE-2026-2006: postgresql: Fix inadequate validation of multibyte character lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258009" id="1258009" title="VUL-0: CVE-2026-2004: postgresql: Harden selectivity estimators against being attached to operators that accept unexpected data types" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258008" id="1258008" title="VUL-0: CVE-2026-2003: postgresql: Guard against unexpected dimensions of oidvector/int2vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258754" id="1258754" title="PostgreSQL 2026-02 Regression Fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" id="CVE-2026-2003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" id="CVE-2026-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" id="CVE-2026-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" id="CVE-2026-2005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" type="cve"/>
    </references>
    <description>This update for postgresql17 fixes the following issues:

Update to version 17.9 (bsc#1258754).

Security issues fixed:

- CVE-2026-2003: improper validation of type &quot;oidvector&quot; may allow disclose a few bytes of server memory (bsc#1258008).
- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code
  execution (bsc#1258009).
- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution
  (bsc#1258010).
- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution
  (bsc#1258011).
    
Regression fixes:

  - the substring() function raises an error &quot;invalid byte sequence for encoding&quot; on non-ASCII text values if the
    source of that value is a database column (caused by CVE-2026-2006 fix).
  - a standby may halt and return an error &quot;could not access status of transaction&quot;.
</description>
    <pkglist>
      <collection>
        <package name="postgresql17" epoch="0" version="17.9" release="150600.13.24.1" arch="src" src="src/postgresql17-17.9-150600.13.24.1.src.rpm">
          <filename>postgresql17-17.9-150600.13.24.1.src.rpm</filename>
        </package>
        <package name="postgresql17-contrib" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-contrib-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-contrib-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-devel" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-devel-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-devel-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-docs" epoch="0" version="17.9" release="150600.13.24.1" arch="noarch" src="noarch/postgresql17-docs-17.9-150600.13.24.1.noarch.rpm">
          <filename>postgresql17-docs-17.9-150600.13.24.1.noarch.rpm</filename>
        </package>
        <package name="postgresql17-plperl" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-plperl-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-plperl-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-plpython" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-plpython-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-plpython-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pltcl" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-pltcl-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-pltcl-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-server-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-server-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-server-devel" epoch="0" version="17.9" release="150600.13.24.1" arch="x86_64" src="x86_64/postgresql17-server-devel-17.9-150600.13.24.1.x86_64.rpm">
          <filename>postgresql17-server-devel-17.9-150600.13.24.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-882</id>
    <title>Security update for postgresql16</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773310779"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258010" id="1258010" title="VUL-0: CVE-2026-2005: postgresql: Fix buffer overrun in contrib/pgcrypto's PGP decryption functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258008" id="1258008" title="VUL-0: CVE-2026-2003: postgresql: Guard against unexpected dimensions of oidvector/int2vector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258011" id="1258011" title="VUL-0: CVE-2026-2006: postgresql: Fix inadequate validation of multibyte character lengths" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258009" id="1258009" title="VUL-0: CVE-2026-2004: postgresql: Harden selectivity estimators against being attached to operators that accept unexpected data types" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258754" id="1258754" title="PostgreSQL 2026-02 Regression Fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" id="CVE-2026-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2004" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" id="CVE-2026-2006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2006" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" id="CVE-2026-2003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2003" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" id="CVE-2026-2005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2005" type="cve"/>
    </references>
    <description>This update for postgresql16 fixes the following issues:

Update to version 16.13 (bsc#1258754).

Security issues fixed:

- CVE-2026-2003: improper validation of type &quot;oidvector&quot; may allow disclose a few bytes of server memory (bsc#1258008).
- CVE-2026-2004: intarray missing validation of type of input to selectivity estimator could lead to arbitrary code
  execution (bsc#1258009).
- CVE-2026-2005: buffer overrun in contrib/pgcrypto's PGP decryption functions could lead to arbitrary code execution
  (bsc#1258010).
- CVE-2026-2006: inadequate validation of multibyte character lengths could lead to arbitrary code execution
  (bsc#1258011).
    
Regression fixes:

  - the substring() function raises an error &quot;invalid byte sequence for encoding&quot; on non-ASCII text values if the
    source of that value is a database column (caused by CVE-2026-2006 fix).
  - a standby may halt and return an error &quot;could not access status of transaction&quot;.
</description>
    <pkglist>
      <collection>
        <package name="postgresql16" epoch="0" version="16.13" release="150600.16.30.1" arch="src" src="src/postgresql16-16.13-150600.16.30.1.src.rpm">
          <filename>postgresql16-16.13-150600.16.30.1.src.rpm</filename>
        </package>
        <package name="postgresql16" epoch="0" version="16.13" release="150600.16.30.1" arch="x86_64" src="x86_64/postgresql16-16.13-150600.16.30.1.x86_64.rpm">
          <filename>postgresql16-16.13-150600.16.30.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server" epoch="0" version="16.13" release="150600.16.30.1" arch="x86_64" src="x86_64/postgresql16-server-16.13-150600.16.30.1.x86_64.rpm">
          <filename>postgresql16-server-16.13-150600.16.30.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-server-devel" epoch="0" version="16.13" release="150600.16.30.1" arch="x86_64" src="x86_64/postgresql16-server-devel-16.13-150600.16.30.1.x86_64.rpm">
          <filename>postgresql16-server-devel-16.13-150600.16.30.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-589</id>
    <title>Security update for xen</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1771581927"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256745" id="1256745" title="VUL-0: CVE-2025-58150: xen: x86: buffer overrun with shadow paging + tracing (XSA-477)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256747" id="1256747" title="VUL-0: CVE-2026-23553: xen: x86: incomplete IBPB for vCPU isolation (XSA-479)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23553" id="CVE-2026-23553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23553" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58150" id="CVE-2025-58150" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58150" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2025-58150: buffer overrun with shadow paging + tracing (XSA-477) (bsc#1256745).
- CVE-2026-23553: incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747).
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.2_06" release="150700.3.25.1" arch="src" src="src/xen-4.20.2_06-150700.3.25.1.src.rpm">
          <filename>xen-4.20.2_06-150700.3.25.1.src.rpm</filename>
        </package>
        <package name="xen" epoch="0" version="4.20.2_06" release="150700.3.25.1" arch="x86_64" src="x86_64/xen-4.20.2_06-150700.3.25.1.x86_64.rpm">
          <filename>xen-4.20.2_06-150700.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.2_06" release="150700.3.25.1" arch="x86_64" src="x86_64/xen-devel-4.20.2_06-150700.3.25.1.x86_64.rpm">
          <filename>xen-devel-4.20.2_06-150700.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.2_06" release="150700.3.25.1" arch="x86_64" src="x86_64/xen-tools-4.20.2_06-150700.3.25.1.x86_64.rpm">
          <filename>xen-tools-4.20.2_06-150700.3.25.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.2_06" release="150700.3.25.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.2_06-150700.3.25.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.2_06-150700.3.25.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-638</id>
    <title>Recommended update for squid</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772024228"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250223" id="1250223" title="Squid proxy core dump due to IBM crypto card SSL modules (Need app core read)" type="bugzilla"/>
    </references>
    <description>This update for squid fixes the following issues:

- fix working with crypto module (bsc#1250223)
</description>
    <pkglist>
      <collection>
        <package name="squid" epoch="0" version="6.10" release="150600.3.17.1" arch="src" src="src/squid-6.10-150600.3.17.1.src.rpm">
          <filename>squid-6.10-150600.3.17.1.src.rpm</filename>
        </package>
        <package name="squid" epoch="0" version="6.10" release="150600.3.17.1" arch="x86_64" src="x86_64/squid-6.10-150600.3.17.1.x86_64.rpm">
          <filename>squid-6.10-150600.3.17.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-665</id>
    <title>Security update for frr</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772118984"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-14796" id="PED-14796" title="https://jira.suse.com/browse/PED-14796" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-266" id="PED-266" title="https://jira.suse.com/browse/PED-266" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252811" id="1252811" title="VUL-0: CVE-2025-61104: frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252835" id="1252835" title="VUL-0: CVE-2025-61102: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252810" id="1252810" title="VUL-0: CVE-2025-61103: frr: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252813" id="1252813" title="VUL-0: CVE-2025-61107: frr,quagga: frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252829" id="1252829" title="VUL-0: CVE-2025-61100: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252812" id="1252812" title="VUL-0: CVE-2025-61106: frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252761" id="1252761" title="VUL-0: CVE-2025-61105: frr: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252838" id="1252838" title="VUL-0: CVE-2025-61099: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252833" id="1252833" title="VUL-0: CVE-2025-61101: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61100" id="CVE-2025-61100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61102" id="CVE-2025-61102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61107" id="CVE-2025-61107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61107" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61101" id="CVE-2025-61101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61106" id="CVE-2025-61106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61106" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61099" id="CVE-2025-61099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61103" id="CVE-2025-61103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61103" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61105" id="CVE-2025-61105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61104" id="CVE-2025-61104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61104" type="cve"/>
    </references>
    <description>This update for frr fixes the following issues:

- CVE-2025-61099: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252838)
- CVE-2025-61100: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252829)
- CVE-2025-61101: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252833)
- CVE-2025-61102: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252835)
- CVE-2025-61103: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252810)
- CVE-2025-61104: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252811)
- CVE-2025-61105: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252761)
- CVE-2025-61106: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252812)
- CVE-2025-61107: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252813)
</description>
    <pkglist>
      <collection>
        <package name="frr" epoch="0" version="10.2.1" release="150700.3.5.1" arch="src" src="src/frr-10.2.1-150700.3.5.1.src.rpm">
          <filename>frr-10.2.1-150700.3.5.1.src.rpm</filename>
        </package>
        <package name="frr" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/frr-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>frr-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="frr-devel" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/frr-devel-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>frr-devel-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrr0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrr0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrr0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrr_pb0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrr_pb0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrr_pb0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrrcares0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrrcares0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrrcares0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrrfpm_pb0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrrfpm_pb0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrrfpm_pb0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrrospfapiclient0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrrospfapiclient0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrrospfapiclient0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrrsnmp0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrrsnmp0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrrsnmp0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libfrrzmq0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libfrrzmq0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libfrrzmq0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="libmgmt_be_nb0" epoch="0" version="10.2.1" release="150700.3.5.1" arch="x86_64" src="x86_64/libmgmt_be_nb0-10.2.1-150700.3.5.1.x86_64.rpm">
          <filename>libmgmt_be_nb0-10.2.1-150700.3.5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-915</id>
    <title>Security update for 389-ds</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773820011"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258727" id="1258727" title="VUL-0: CVE-2025-14905: 389-ds: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258689" id="1258689" title="[QE][Build 20260222-1] missing library in dscreate (lib389  2.7.0 package update)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14905" id="CVE-2025-14905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14905" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-14342" id="PED-14342" title="https://jira.suse.com/browse/PED-14342" type="jira"/>
    </references>
    <description>This update for 389-ds fixes the following issues:

Update to LTS branch 2.7 (jsc#PED-14342):

- CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727).

Bug fixes:

- Resolve python build error that caused lib389 to be missing some libraries. (bsc#1258689)
</description>
    <pkglist>
      <collection>
        <package name="389-ds" epoch="0" version="2.7.0~git144.f597a91d8" release="150700.3.13.1" arch="src" src="src/389-ds-2.7.0~git144.f597a91d8-150700.3.13.1.src.rpm">
          <filename>389-ds-2.7.0~git144.f597a91d8-150700.3.13.1.src.rpm</filename>
        </package>
        <package name="389-ds" epoch="0" version="2.7.0~git144.f597a91d8" release="150700.3.13.1" arch="x86_64" src="x86_64/389-ds-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm">
          <filename>389-ds-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="389-ds-devel" epoch="0" version="2.7.0~git144.f597a91d8" release="150700.3.13.1" arch="x86_64" src="x86_64/389-ds-devel-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm">
          <filename>389-ds-devel-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="lib389" epoch="0" version="2.7.0~git144.f597a91d8" release="150700.3.13.1" arch="x86_64" src="x86_64/lib389-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm">
          <filename>lib389-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm</filename>
        </package>
        <package name="libsvrcore0" epoch="0" version="2.7.0~git144.f597a91d8" release="150700.3.13.1" arch="x86_64" src="x86_64/libsvrcore0-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm">
          <filename>libsvrcore0-2.7.0~git144.f597a91d8-150700.3.13.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-661</id>
    <title>Security update for erlang</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772118615"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249470" id="1249470" title="VUL-0: CVE-2025-48038: erlang: Erlang Excessive Use of System Resources" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249472" id="1249472" title="VUL-0: CVE-2025-48040: erlang: Erlang Excessive Resource Consumption" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249469" id="1249469" title="VUL-0: CVE-2025-48039: erlang: Erlang Excessive Use of System Resources" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48039" id="CVE-2025-48039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48039" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48038" id="CVE-2025-48038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48038" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48040" id="CVE-2025-48040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48040" type="cve"/>
    </references>
    <description>This update for erlang fixes the following issues:

- CVE-2025-48039:Fixed an excessive use of system resources. (bsc#1249469)
- CVE-2025-48038:Fixed an excessive use of system resources. (bsc#1249470)
- CVE-2025-48040:Fixed an excessive resource consumption. (bsc#1249472)
</description>
    <pkglist>
      <collection>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.29.1" arch="src" src="src/erlang-23.3.4.19-150300.3.29.1.src.rpm">
          <filename>erlang-23.3.4.19-150300.3.29.1.src.rpm</filename>
        </package>
        <package name="erlang" epoch="0" version="23.3.4.19" release="150300.3.29.1" arch="x86_64" src="x86_64/erlang-23.3.4.19-150300.3.29.1.x86_64.rpm">
          <filename>erlang-23.3.4.19-150300.3.29.1.x86_64.rpm</filename>
        </package>
        <package name="erlang-epmd" epoch="0" version="23.3.4.19" release="150300.3.29.1" arch="x86_64" src="x86_64/erlang-epmd-23.3.4.19-150300.3.29.1.x86_64.rpm">
          <filename>erlang-epmd-23.3.4.19-150300.3.29.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1169</id>
    <title>Security update for wireshark</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1775118570"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231475" id="1231475" title="VUL-0: CVE-2024-9780: wireshark: ITS dissector crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231476" id="1231476" title="VUL-0: CVE-2024-9781: wireshark: AppleTalk and RELOAD Framing dissector crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233593" id="1233593" title="VUL-0: CVE-2024-11596: wireshark: Buffer Over-read in Wireshark" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233594" id="1233594" title="VUL-0: CVE-2024-11595: wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237414" id="1237414" title="VUL-0: CVE-2025-1492: wireshark: Uncontrolled Recursion in Wireshark" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244081" id="1244081" title="VUL-0: CVE-2025-5601: wireshark: Column handling crashes in Wireshark allows denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249090" id="1249090" title="VUL-0: CVE-2025-9817: wireshark: NULL Pointer Dereference in ssh dissector" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254108" id="1254108" title="VUL-0: CVE-2025-13499: wireshark: a malformed packet can lead to a Kafka dissector crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254262" id="1254262" title="VUL-0: CVE-2025-13674: wireshark: injecting a malformed packet can cause a crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254471" id="1254471" title="VUL-0: CVE-2025-13945: wireshark: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254472" id="1254472" title="VUL-0: CVE-2025-13946: wireshark: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256734" id="1256734" title="VUL-0: CVE-2026-0959: wireshark: denial of service via IEEE 802.11 protocol dissector crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256736" id="1256736" title="VUL-0: CVE-2026-0960: wireshark: denial of Service via HTTP3 protocol dissector infinite loop" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256738" id="1256738" title="VUL-0: CVE-2026-0961: wireshark: denial of Service vulnerability in BLF file parser" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256739" id="1256739" title="VUL-0: CVE-2026-0962: wireshark: denial of Service via SOME/IP-SD protocol dissector crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258907" id="1258907" title="VUL-0: CVE-2026-3201: wireshark: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to memory exhaustion" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258908" id="1258908" title="VUL-0: CVE-2026-3202: wireshark: missing checks in NTS-KE protocol dissector can lead to crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258909" id="1258909" title="VUL-0: CVE-2026-3203: wireshark: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9780" id="CVE-2024-9780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9780" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9781" id="CVE-2024-9781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9781" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11595" id="CVE-2024-11595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11595" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11596" id="CVE-2024-11596" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11596" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1492" id="CVE-2025-1492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5601" id="CVE-2025-5601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5601" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9817" id="CVE-2025-9817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13499" id="CVE-2025-13499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13499" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13674" id="CVE-2025-13674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13674" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13945" id="CVE-2025-13945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13946" id="CVE-2025-13946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0959" id="CVE-2026-0959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0959" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0960" id="CVE-2026-0960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0960" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0961" id="CVE-2026-0961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0961" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0962" id="CVE-2026-0962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0962" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3201" id="CVE-2026-3201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3201" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3202" id="CVE-2026-3202" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3202" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3203" id="CVE-2026-3203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3203" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-15400" id="PED-15400" title="https://jira.suse.com/browse/PED-15400" type="jira"/>
    </references>
    <description>This update for wireshark fixes the following issues:

Update Wireshark to version 4.6.4 (jsc#PED-15400).

- CVE-2024-9780: ITS dissector crash (bsc#1231475).
- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).
- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).
- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).
- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).
- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).
- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).
- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).
- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of
  service (bsc#1254472).
- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).
- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).
- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).
- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).
- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to
  memory exhaustion (bsc#1258907).
- CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).
- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and
  crash (bsc#1258909).

Also libvirt was rebuilt against wireshark for the libvirt plugin.
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.19.1" arch="src" src="src/libvirt-11.0.0-150700.4.19.1.src.rpm">
          <filename>libvirt-11.0.0-150700.4.19.1.src.rpm</filename>
        </package>
        <package name="libvirt" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-client-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-client-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-client-qemu-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-client-qemu-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-common-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-common-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-nwfilter" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-config-nwfilter-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-config-nwfilter-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-interface" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-interface-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-interface-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-libxl" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-libxl-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-libxl-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-log-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-log-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-sanlock-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-xen" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-daemon-xen-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-daemon-xen-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-devel" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-devel-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-devel-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-doc" epoch="0" version="11.0.0" release="150700.4.19.1" arch="noarch" src="noarch/libvirt-doc-11.0.0-150700.4.19.1.noarch.rpm">
          <filename>libvirt-doc-11.0.0-150700.4.19.1.noarch.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="11.0.0" release="150700.4.19.1" arch="x86_64" src="x86_64/libvirt-nss-11.0.0-150700.4.19.1.x86_64.rpm">
          <filename>libvirt-nss-11.0.0-150700.4.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-848</id>
    <title>Security update for valkey</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772907525"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258746" id="1258746" title="VUL-0: CVE-2025-67733: valkey: data tampering and denial of service via improper null character handling in Lua scripts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258788" id="1258788" title="VUL-0: CVE-2026-21863: valkey: denial of service via invalid clusterbus packet" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67733" id="CVE-2025-67733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67733" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21863" id="CVE-2026-21863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21863" type="cve"/>
    </references>
    <description>This update for valkey fixes the following issues:

Update to version 8.0.7.

Security issues fixed:

- CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts
  (bsc#1258746).
- CVE-2026-21863: denial of service via invalid clusterbus packet (bsc#1258788).

Other updates and bugfixes:  
  
  - ltrim should not call signalModifiedKey when no elements are removed (#2787)
  - chained replica crash when doing dual channel replication (#2983)
  - used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
  - avoids crash during MODULE UNLOAD when ACL rules reference a module command and
subcommand (#3160)
  - server assert on ACL LOAD and resetchannels (#3182)
  - bug causing no response flush sometimes when IO threads are busy (#3205)
</description>
    <pkglist>
      <collection>
        <package name="valkey" epoch="0" version="8.0.7" release="150700.3.14.1" arch="src" src="src/valkey-8.0.7-150700.3.14.1.src.rpm">
          <filename>valkey-8.0.7-150700.3.14.1.src.rpm</filename>
        </package>
        <package name="valkey" epoch="0" version="8.0.7" release="150700.3.14.1" arch="x86_64" src="x86_64/valkey-8.0.7-150700.3.14.1.x86_64.rpm">
          <filename>valkey-8.0.7-150700.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="valkey-compat-redis" epoch="0" version="8.0.7" release="150700.3.14.1" arch="noarch" src="noarch/valkey-compat-redis-8.0.7-150700.3.14.1.noarch.rpm">
          <filename>valkey-compat-redis-8.0.7-150700.3.14.1.noarch.rpm</filename>
        </package>
        <package name="valkey-devel" epoch="0" version="8.0.7" release="150700.3.14.1" arch="x86_64" src="x86_64/valkey-devel-8.0.7-150700.3.14.1.x86_64.rpm">
          <filename>valkey-devel-8.0.7-150700.3.14.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-807</id>
    <title>Recommended update for rmt-server</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772639642"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253147" id="1253147" title="It is not possible to purge a large amount of systems from the database" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256826" id="1256826" title="[Build 178.26] NVIDIA-GPU-Compute-Toolkit-CUDA repo is available for sles-16.0-x86_64 and aarch64 on SCC, but it can not be synced to rmt server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256883" id="1256883" title="Update server returns &quot;Unprocessable Content&quot; making registration fail" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257133" id="1257133" title="InstanceVerification::Exception (Malformed instance data) in Google RMT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253146" id="1253146" title="Listing systems when a very large number of systems is registered fails" type="bugzilla"/>
    </references>
    <description>This update for rmt-server fixes the following issues:

- Upgrade to version 2.25:
    * Fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
    * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
    * Support for new redirect_repo_hosts config, to exclude some repo hosts
      from mirroring, and send clients directly there (jsc#SCC-452)
    * rmt-server-pubcloud:
        + Clearer error message (bsc#1256883)
        + Add Valkey + Sidekiq for async processing
        + Handle zypper response when data exporter raises an error (bsc#1257133)
</description>
    <pkglist>
      <collection>
        <package name="rmt-server" epoch="0" version="2.25" release="150700.3.12.2" arch="src" src="src/rmt-server-2.25-150700.3.12.2.src.rpm">
          <filename>rmt-server-2.25-150700.3.12.2.src.rpm</filename>
        </package>
        <package name="rmt-server" epoch="0" version="2.25" release="150700.3.12.2" arch="x86_64" src="x86_64/rmt-server-2.25-150700.3.12.2.x86_64.rpm">
          <filename>rmt-server-2.25-150700.3.12.2.x86_64.rpm</filename>
        </package>
        <package name="rmt-server-config" epoch="0" version="2.25" release="150700.3.12.2" arch="x86_64" src="x86_64/rmt-server-config-2.25-150700.3.12.2.x86_64.rpm">
          <filename>rmt-server-config-2.25-150700.3.12.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-832</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772728727"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255400" id="1255400" title="VUL-0: CVE-2025-14876: kvm,qemu: qemu-kvm: Unbounded allocation in virtio-crypto" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" id="CVE-2025-14876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-14271" id="PED-14271" title="https://jira.suse.com/browse/PED-14271" type="jira"/>
    </references>
    <description>This update for qemu fixes the following issues:

Security issue:

- CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400).

Non security issues:

- * hw/virtio: Also include md stubs in case CONFIG_VIRTIO_PCI is not set (jsc#PED-14271).
- * s390x/pv: prepare for memory devices (jsc#PED-14271).
- * s390x/s390-skeys: prepare for memory devices (jsc#PED-14271).
- * s390x/s390-stattrib-kvm: prepare for memory devices and sparse memory layouts (jsc#PED-14271).
- * s390x/s390-virtio-ccw: prepare for memory devices (jsc#PED-14271).
- * s390x/virtio-ccw: add support for virtio based memory devices (jsc#PED-14271).
- * s390x: remember the maximum page size (jsc#PED-14271).
- * s390x: virtio-mem support (jsc#PED-14271).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.17.1" arch="src" src="src/qemu-9.2.4-150700.3.17.1.src.rpm">
          <filename>qemu-9.2.4-150700.3.17.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-alsa" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-audio-alsa-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-audio-alsa-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-dbus" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-audio-dbus-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-audio-dbus-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pa" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-audio-pa-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-audio-pa-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-pipewire" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-audio-pipewire-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-audio-pipewire-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-audio-spice-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-audio-spice-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-block-curl-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-block-curl-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-block-iscsi-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-block-iscsi-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-nfs" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-block-nfs-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-block-nfs-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-block-rbd-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-block-rbd-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-block-ssh-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-block-ssh-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-baum" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-chardev-baum-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-chardev-baum-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-chardev-spice-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-chardev-spice-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-guest-agent-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-guest-agent-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-headless" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-headless-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-headless-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="9.2.4" release="150700.3.17.1" arch="noarch" src="noarch/qemu-ipxe-9.2.4-150700.3.17.1.noarch.rpm">
          <filename>qemu-ipxe-9.2.4-150700.3.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ksm-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ksm-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="9.2.4" release="150700.3.17.1" arch="noarch" src="noarch/qemu-lang-9.2.4-150700.3.17.1.noarch.rpm">
          <filename>qemu-lang-9.2.4-150700.3.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.17.1" arch="noarch" src="noarch/qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1.noarch.rpm">
          <filename>qemu-seabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-spice" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-spice-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-spice-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-curses" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-curses-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-curses-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-dbus" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-dbus-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-dbus-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-gtk" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-gtk-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-gtk-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-opengl-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-opengl-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-app" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-spice-app-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-spice-app-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="9.2.41.16.3_3_g3d33c746" release="150700.3.17.1" arch="noarch" src="noarch/qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1.noarch.rpm">
          <filename>qemu-vgabios-9.2.41.16.3_3_g3d33c746-150700.3.17.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="9.2.4" release="150700.3.17.1" arch="x86_64" src="x86_64/qemu-x86-9.2.4-150700.3.17.1.x86_64.rpm">
          <filename>qemu-x86-9.2.4-150700.3.17.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-889</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773388735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255400" id="1255400" title="VUL-0: CVE-2025-14876: kvm,qemu: qemu-kvm: Unbounded allocation in virtio-crypto" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" id="CVE-2025-14876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" type="cve"/>
    </references>
    <description>This update for qemu fixes the following issue:

- CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400).
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="7.1.0" release="150500.49.39.2" arch="src" src="src/qemu-7.1.0-150500.49.39.2.src.rpm">
          <filename>qemu-7.1.0-150500.49.39.2.src.rpm</filename>
        </package>
        <package name="qemu-sgabios" epoch="0" version="8" release="150500.49.39.2" arch="noarch" src="noarch/qemu-sgabios-8-150500.49.39.2.noarch.rpm">
          <filename>qemu-sgabios-8-150500.49.39.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-850</id>
    <title>Recommended update for virt-manager</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773051845"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257182" id="1257182" title="A VM will fail to boot with Intel TDX or AMD SNP with a TPM device defined in the VM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027942" id="1027942" title="virt-manager: Missing upstream bug fixes" type="bugzilla"/>
    </references>
    <description>This update for virt-manager fixes the following issues:

- Fix: A VM will fail to boot with Intel TDX or AMD SNP with a TPM device defined in the VM (bsc#1257182)
- Fix: virt-manager: Missing upstream bug fixes (bsc#1027942)
</description>
    <pkglist>
      <collection>
        <package name="virt-install" epoch="0" version="5.0.0" release="150700.7.11.1" arch="noarch" src="noarch/virt-install-5.0.0-150700.7.11.1.noarch.rpm">
          <filename>virt-install-5.0.0-150700.7.11.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.11.1" arch="noarch" src="noarch/virt-manager-5.0.0-150700.7.11.1.noarch.rpm">
          <filename>virt-manager-5.0.0-150700.7.11.1.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.11.1" arch="src" src="src/virt-manager-5.0.0-150700.7.11.1.src.rpm">
          <filename>virt-manager-5.0.0-150700.7.11.1.src.rpm</filename>
        </package>
        <package name="virt-manager-common" epoch="0" version="5.0.0" release="150700.7.11.1" arch="noarch" src="noarch/virt-manager-common-5.0.0-150700.7.11.1.noarch.rpm">
          <filename>virt-manager-common-5.0.0-150700.7.11.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-809</id>
    <title>Recommended update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1772651605"/>
    <references/>
    <description>This update for openvswitch fixes the following issues:

- Update openvswitch to 3.5.3:
    * DPDK: OVS validated with DPDK 24.11.3.
    * Bug fixes

  </description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_5-0" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/libopenvswitch-3_5-0-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>libopenvswitch-3_5-0-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="libovn-25_03-0" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/libovn-25_03-0-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>libovn-25_03-0-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.3" release="150700.41.12.1" arch="src" src="src/openvswitch-3.5.3-150700.41.12.1.src.rpm">
          <filename>openvswitch-3.5.3-150700.41.12.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-devel" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-devel-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-devel-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-ipsec" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-ipsec-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-ipsec-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-pki" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-pki-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-pki-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-test" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-test-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-test-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-vtep" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/openvswitch-vtep-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>openvswitch-vtep-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-central" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-central-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-central-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-devel" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-devel-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-devel-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-docker" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-docker-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-docker-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-host" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-host-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-host-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-vtep" epoch="0" version="25.03.2" release="150700.41.12.1" arch="x86_64" src="x86_64/ovn-vtep-25.03.2-150700.41.12.1.x86_64.rpm">
          <filename>ovn-vtep-25.03.2-150700.41.12.1.x86_64.rpm</filename>
        </package>
        <package name="python3-openvswitch" epoch="0" version="3.5.3" release="150700.41.12.1" arch="x86_64" src="x86_64/python3-openvswitch-3.5.3-150700.41.12.1.x86_64.rpm">
          <filename>python3-openvswitch-3.5.3-150700.41.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1406</id>
    <title>Security update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776342929"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222465" id="1222465" title="fdisk creates broken partition table" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234736" id="1234736" title="&quot;findmnt --real -kno source&quot; returns &quot;portal&quot; which is not a real filesystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258859" id="1258859" title="VUL-0: CVE-2026-3184: util-linux: access control bypass due to improper hostname canonicalization in `login`" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3184" id="CVE-2026-3184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3184" type="cve"/>
    </references>
    <description>This update for util-linux fixes the following issues:

Security issue:

- CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).

Non security issues:

- recognize fuse &quot;portal&quot; as a virtual file system (bsc#1234736).
- fdisk: fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465).
</description>
    <pkglist>
      <collection>
        <package name="util-linux-systemd" epoch="0" version="2.40.4" release="150700.4.10.1" arch="src" src="src/util-linux-systemd-2.40.4-150700.4.10.1.src.rpm">
          <filename>util-linux-systemd-2.40.4-150700.4.10.1.src.rpm</filename>
        </package>
        <package name="uuidd" epoch="0" version="2.40.4" release="150700.4.10.1" arch="x86_64" src="x86_64/uuidd-2.40.4-150700.4.10.1.x86_64.rpm">
          <filename>uuidd-2.40.4-150700.4.10.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1326</id>
    <title>Recommended update for apache2-mod_auth_openidc</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776174773"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-14130" id="PED-14130" title="https://jira.suse.com/browse/PED-14130" type="jira"/>
    </references>
    <description>This update for apache2-mod_auth_openidc fixes the following issues:

- actually run the testsuite (jsc#PED-14130)
</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.4.17.1" release="150600.16.17.1" arch="src" src="src/apache2-mod_auth_openidc-2.4.17.1-150600.16.17.1.src.rpm">
          <filename>apache2-mod_auth_openidc-2.4.17.1-150600.16.17.1.src.rpm</filename>
        </package>
        <package name="apache2-mod_auth_openidc" epoch="0" version="2.4.17.1" release="150600.16.17.1" arch="x86_64" src="x86_64/apache2-mod_auth_openidc-2.4.17.1-150600.16.17.1.x86_64.rpm">
          <filename>apache2-mod_auth_openidc-2.4.17.1-150600.16.17.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1093</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774547541"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259247" id="1259247" title="VUL-0: CVE-2026-23554: EMBARGOED: xen: Use after free of paging structures in EPT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259248" id="1259248" title="VUL-0: CVE-2026-23555: EMBARGOED: xen: Xenstored DoS by unprivileged domain" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23555" id="CVE-2026-23555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23555" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23554" id="CVE-2026-23554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23554" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480)
- CVE-2026-23555: xen: Xenstored DoS by unprivileged domain (bsc#1259248, XSA-481)
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.20.2_08" release="150700.3.28.1" arch="src" src="src/xen-4.20.2_08-150700.3.28.1.src.rpm">
          <filename>xen-4.20.2_08-150700.3.28.1.src.rpm</filename>
        </package>
        <package name="xen" epoch="0" version="4.20.2_08" release="150700.3.28.1" arch="x86_64" src="x86_64/xen-4.20.2_08-150700.3.28.1.x86_64.rpm">
          <filename>xen-4.20.2_08-150700.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="xen-devel" epoch="0" version="4.20.2_08" release="150700.3.28.1" arch="x86_64" src="x86_64/xen-devel-4.20.2_08-150700.3.28.1.x86_64.rpm">
          <filename>xen-devel-4.20.2_08-150700.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools" epoch="0" version="4.20.2_08" release="150700.3.28.1" arch="x86_64" src="x86_64/xen-tools-4.20.2_08-150700.3.28.1.x86_64.rpm">
          <filename>xen-tools-4.20.2_08-150700.3.28.1.x86_64.rpm</filename>
        </package>
        <package name="xen-tools-xendomains-wait-disk" epoch="0" version="4.20.2_08" release="150700.3.28.1" arch="noarch" src="noarch/xen-tools-xendomains-wait-disk-4.20.2_08-150700.3.28.1.noarch.rpm">
          <filename>xen-tools-xendomains-wait-disk-4.20.2_08-150700.3.28.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-893</id>
    <title>Recommended update for rdma-core</title>
    <severity>low</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773397927"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259389" id="1259389" title="Dependency while installing package libpcap1" type="bugzilla"/>
    </references>
    <description>
This update for rdma-core fixes the following issue:

- ship libibverbs1-32bit to packagehub, to meet requirements of libpcap1-32bit.
</description>
    <pkglist>
      <collection>
        <package name="ibacm" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/ibacm-54.0-150700.3.2.1.x86_64.rpm">
          <filename>ibacm-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="iwpmd" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/iwpmd-54.0-150700.3.2.1.x86_64.rpm">
          <filename>iwpmd-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="libibverbs-utils" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/libibverbs-utils-54.0-150700.3.2.1.x86_64.rpm">
          <filename>libibverbs-utils-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="librdmacm-utils" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/librdmacm-utils-54.0-150700.3.2.1.x86_64.rpm">
          <filename>librdmacm-utils-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rdma-core" epoch="0" version="54.0" release="150700.3.2.1" arch="src" src="src/rdma-core-54.0-150700.3.2.1.src.rpm">
          <filename>rdma-core-54.0-150700.3.2.1.src.rpm</filename>
        </package>
        <package name="rdma-ndd" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rdma-ndd-54.0-150700.3.2.1.x86_64.rpm">
          <filename>rdma-ndd-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="srp_daemon" epoch="0" version="54.0" release="150700.3.2.1" arch="x86_64" src="x86_64/srp_daemon-54.0-150700.3.2.1.x86_64.rpm">
          <filename>srp_daemon-54.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1374</id>
    <title>Recommended update for virt-manager</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776272965"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-14636" id="PED-14636" title="UEFI as default for new VMs" type="jira"/>
    </references>
    <description>This update for virt-manager fixes the following issues:

- UEFI as default for new SLES 16 VMs (jsc#PED-14636 ).
- Fix media detection failure to distinguish between sles16 and sles16.1</description>
    <pkglist>
      <collection>
        <package name="virt-install" epoch="0" version="5.0.0" release="150700.7.14.2" arch="noarch" src="noarch/virt-install-5.0.0-150700.7.14.2.noarch.rpm">
          <filename>virt-install-5.0.0-150700.7.14.2.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.14.2" arch="noarch" src="noarch/virt-manager-5.0.0-150700.7.14.2.noarch.rpm">
          <filename>virt-manager-5.0.0-150700.7.14.2.noarch.rpm</filename>
        </package>
        <package name="virt-manager" epoch="0" version="5.0.0" release="150700.7.14.2" arch="src" src="src/virt-manager-5.0.0-150700.7.14.2.src.rpm">
          <filename>virt-manager-5.0.0-150700.7.14.2.src.rpm</filename>
        </package>
        <package name="virt-manager-common" epoch="0" version="5.0.0" release="150700.7.14.2" arch="noarch" src="noarch/virt-manager-common-5.0.0-150700.7.14.2.noarch.rpm">
          <filename>virt-manager-common-5.0.0-150700.7.14.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-934</id>
    <title>Recommended update for libosinfo</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1773922488"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-14636" id="PED-14636" title="UEFI as default for new VMs" type="jira"/>
    </references>
    <description>This update for libosinfo fixes the following issue:

- UEFI as default for new VMs (jsc#PED-14636).</description>
    <pkglist>
      <collection>
        <package name="libosinfo" epoch="0" version="1.12.0" release="150700.3.3.2" arch="src" src="src/libosinfo-1.12.0-150700.3.3.2.src.rpm">
          <filename>libosinfo-1.12.0-150700.3.3.2.src.rpm</filename>
        </package>
        <package name="libosinfo-devel" epoch="0" version="1.12.0" release="150700.3.3.2" arch="x86_64" src="x86_64/libosinfo-devel-1.12.0-150700.3.3.2.x86_64.rpm">
          <filename>libosinfo-devel-1.12.0-150700.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-Libosinfo-1_0" epoch="0" version="1.12.0" release="150700.3.3.2" arch="x86_64" src="x86_64/typelib-1_0-Libosinfo-1_0-1.12.0-150700.3.3.2.x86_64.rpm">
          <filename>typelib-1_0-Libosinfo-1_0-1.12.0-150700.3.3.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1063</id>
    <title>Security update for frr</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774521413"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252761" id="1252761" title="VUL-0: CVE-2025-61105: frr: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252810" id="1252810" title="VUL-0: CVE-2025-61103: frr: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252811" id="1252811" title="VUL-0: CVE-2025-61104: frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252812" id="1252812" title="VUL-0: CVE-2025-61106: frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252813" id="1252813" title="VUL-0: CVE-2025-61107: frr,quagga: frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252829" id="1252829" title="VUL-0: CVE-2025-61100: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252833" id="1252833" title="VUL-0: CVE-2025-61101: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252835" id="1252835" title="VUL-0: CVE-2025-61102: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252838" id="1252838" title="VUL-0: CVE-2025-61099: frr: NULL Pointer Dereference in FRRouting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61099" id="CVE-2025-61099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61100" id="CVE-2025-61100" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61100" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61101" id="CVE-2025-61101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61101" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61102" id="CVE-2025-61102" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61102" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61103" id="CVE-2025-61103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61103" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61104" id="CVE-2025-61104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61105" id="CVE-2025-61105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61105" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61106" id="CVE-2025-61106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61106" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61107" id="CVE-2025-61107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61107" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-14796" id="PED-14796" title="https://jira.suse.com/browse/PED-14796" type="jira"/>
    </references>
    <description>This update for frr fixes the following issues:

Security issues:

- CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
- CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
- CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
- CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
- CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
- CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
- CVE-2025-61105: NULL pointer dereference in  show_vty_link_info() in ospf_ext.c (bsc#1252761).
- CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).

Non-security issues:

- Fix /var/run leftovers in logrotate config file, create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
</description>
    <pkglist>
      <collection>
        <package name="frr" epoch="0" version="8.5.6" release="150500.4.36.1" arch="src" src="src/frr-8.5.6-150500.4.36.1.src.rpm">
          <filename>frr-8.5.6-150500.4.36.1.src.rpm</filename>
        </package>
        <package name="libmlag_pb0" epoch="0" version="8.5.6" release="150500.4.36.1" arch="x86_64" src="x86_64/libmlag_pb0-8.5.6-150500.4.36.1.x86_64.rpm">
          <filename>libmlag_pb0-8.5.6-150500.4.36.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1069</id>
    <title>Recommended update for linuxptp</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774523566"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256059" id="1256059" title="ptp4l default service configuration doesn't allow for /dev/ptp0 access" type="bugzilla"/>
    </references>
    <description>This update for linuxptp fixes the following issues:

- Move to DevicePolicy=closed instead of -PrivateDevices=true
  to allow access to devices (bsc#1256059)
</description>
    <pkglist>
      <collection>
        <package name="linuxptp" epoch="0" version="4.4" release="150700.3.3.1" arch="src" src="src/linuxptp-4.4-150700.3.3.1.src.rpm">
          <filename>linuxptp-4.4-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="linuxptp" epoch="0" version="4.4" release="150700.3.3.1" arch="x86_64" src="x86_64/linuxptp-4.4-150700.3.3.1.x86_64.rpm">
          <filename>linuxptp-4.4-150700.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1413</id>
    <title>Security update for ovmf</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776346440"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252441" id="1252441" title="VUL-0: CVE-2025-59438: ovmf: mbedtls: padding oracle attack possible through timing of cipher error reporting" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59438" id="CVE-2025-59438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59438" type="cve"/>
    </references>
    <description>This update for ovmf fixes the following issue:

- CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.15.1" arch="src" src="src/ovmf-202408-150700.3.15.1.src.rpm">
          <filename>ovmf-202408-150700.3.15.1.src.rpm</filename>
        </package>
        <package name="ovmf" epoch="0" version="202408" release="150700.3.15.1" arch="x86_64" src="x86_64/ovmf-202408-150700.3.15.1.x86_64.rpm">
          <filename>ovmf-202408-150700.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovmf-tools" epoch="0" version="202408" release="150700.3.15.1" arch="x86_64" src="x86_64/ovmf-tools-202408-150700.3.15.1.x86_64.rpm">
          <filename>ovmf-tools-202408-150700.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202408" release="150700.3.15.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202408-150700.3.15.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202408-150700.3.15.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1434</id>
    <title>Recommended update for apparmor</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776422965"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259441" id="1259441" title="apparmor DENIES causing printing to fail with apparmor profiles for sle15-sp7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225811" id="1225811" title="samba gives DENIED in audit.log" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- samba gives denied in audit with apparmor (bsc#1225811).
- apparmor denies printing with profiles on sle15-sp7 (bsc#1259441).</description>
    <pkglist>
      <collection>
        <package name="apache2-mod_apparmor" epoch="0" version="3.1.7" release="150600.5.12.2" arch="x86_64" src="x86_64/apache2-mod_apparmor-3.1.7-150600.5.12.2.x86_64.rpm">
          <filename>apache2-mod_apparmor-3.1.7-150600.5.12.2.x86_64.rpm</filename>
        </package>
        <package name="apparmor" epoch="0" version="3.1.7" release="150600.5.12.2" arch="src" src="src/apparmor-3.1.7-150600.5.12.2.src.rpm">
          <filename>apparmor-3.1.7-150600.5.12.2.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1068</id>
    <title>Security update for pgvector</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774521577"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258945" id="1258945" title="VUL-0: CVE-2026-3172: pgvector: Buffer overflow in parallel HNSW index build" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3172" id="CVE-2026-3172" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3172" type="cve"/>
    </references>
    <description>This update for pgvector fixes the following issue:

Update to pgvector 0.8.2:

- CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945).

Changelog:

 * Fixed Index Searches in EXPLAIN output for Postgres 18
</description>
    <pkglist>
      <collection>
        <package name="pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="src" src="src/pgvector-0.8.2-150600.13.9.1.src.rpm">
          <filename>pgvector-0.8.2-150600.13.9.1.src.rpm</filename>
        </package>
        <package name="pgvector-devel" epoch="0" version="0.8.2" release="150600.13.9.1" arch="x86_64" src="x86_64/pgvector-devel-0.8.2-150600.13.9.1.x86_64.rpm">
          <filename>pgvector-devel-0.8.2-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql16-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="src" src="src/postgresql16-pgvector-0.8.2-150600.13.9.1.src.rpm">
          <filename>postgresql16-pgvector-0.8.2-150600.13.9.1.src.rpm</filename>
        </package>
        <package name="postgresql16-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="x86_64" src="x86_64/postgresql16-pgvector-0.8.2-150600.13.9.1.x86_64.rpm">
          <filename>postgresql16-pgvector-0.8.2-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql17-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="src" src="src/postgresql17-pgvector-0.8.2-150600.13.9.1.src.rpm">
          <filename>postgresql17-pgvector-0.8.2-150600.13.9.1.src.rpm</filename>
        </package>
        <package name="postgresql17-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="x86_64" src="x86_64/postgresql17-pgvector-0.8.2-150600.13.9.1.x86_64.rpm">
          <filename>postgresql17-pgvector-0.8.2-150600.13.9.1.x86_64.rpm</filename>
        </package>
        <package name="postgresql18-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="src" src="src/postgresql18-pgvector-0.8.2-150600.13.9.1.src.rpm">
          <filename>postgresql18-pgvector-0.8.2-150600.13.9.1.src.rpm</filename>
        </package>
        <package name="postgresql18-pgvector" epoch="0" version="0.8.2" release="150600.13.9.1" arch="x86_64" src="x86_64/postgresql18-pgvector-0.8.2-150600.13.9.1.x86_64.rpm">
          <filename>postgresql18-pgvector-0.8.2-150600.13.9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1108</id>
    <title>Recommended update for rmt-server</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774603277"/>
    <references/>
    <description>This update for rmt-server fixes the following issues:

- Update to version 2.26:
    * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)
</description>
    <pkglist>
      <collection>
        <package name="rmt-server" epoch="0" version="2.26" release="150700.3.15.1" arch="src" src="src/rmt-server-2.26-150700.3.15.1.src.rpm">
          <filename>rmt-server-2.26-150700.3.15.1.src.rpm</filename>
        </package>
        <package name="rmt-server" epoch="0" version="2.26" release="150700.3.15.1" arch="x86_64" src="x86_64/rmt-server-2.26-150700.3.15.1.x86_64.rpm">
          <filename>rmt-server-2.26-150700.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="rmt-server-config" epoch="0" version="2.26" release="150700.3.15.1" arch="x86_64" src="x86_64/rmt-server-config-2.26-150700.3.15.1.x86_64.rpm">
          <filename>rmt-server-config-2.26-150700.3.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1167</id>
    <title>Recommended update for apache2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1775111012"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-15953" id="PED-15953" title="https://jira.suse.com/browse/PED-15953" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254182" id="1254182" title="L3: apache2-worker segfaults — thread::JoZGbesCIXS0z3prZqPn3Cs::" type="bugzilla"/>
    </references>
    <description>This update for apache2 fixes the following issues:

- Update to 2.4.66:   
    * ECO: (jsc#PED-15953):
    * Fix: apache2-worker segfaults (bsc#1254182)
- Removed patches, as they've been merged/fixed upstream.
- Removed these FIPS-related patches too, as they too have been merged upstream
</description>
    <pkglist>
      <collection>
        <package name="apache2-devel" epoch="0" version="2.4.66" release="150700.4.15.1" arch="src" src="src/apache2-devel-2.4.66-150700.4.15.1.src.rpm">
          <filename>apache2-devel-2.4.66-150700.4.15.1.src.rpm</filename>
        </package>
        <package name="apache2-devel" epoch="0" version="2.4.66" release="150700.4.15.1" arch="x86_64" src="x86_64/apache2-devel-2.4.66-150700.4.15.1.x86_64.rpm">
          <filename>apache2-devel-2.4.66-150700.4.15.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.66" release="150700.4.15.1" arch="src" src="src/apache2-utils-2.4.66-150700.4.15.1.src.rpm">
          <filename>apache2-utils-2.4.66-150700.4.15.1.src.rpm</filename>
        </package>
        <package name="apache2-utils" epoch="0" version="2.4.66" release="150700.4.15.1" arch="x86_64" src="x86_64/apache2-utils-2.4.66-150700.4.15.1.x86_64.rpm">
          <filename>apache2-utils-2.4.66-150700.4.15.1.x86_64.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.66" release="150700.4.15.1" arch="src" src="src/apache2-worker-2.4.66-150700.4.15.1.src.rpm">
          <filename>apache2-worker-2.4.66-150700.4.15.1.src.rpm</filename>
        </package>
        <package name="apache2-worker" epoch="0" version="2.4.66" release="150700.4.15.1" arch="x86_64" src="x86_64/apache2-worker-2.4.66-150700.4.15.1.x86_64.rpm">
          <filename>apache2-worker-2.4.66-150700.4.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="optional" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1112</id>
    <title>Optional update for rsyslog</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1774604066"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-15910" id="PED-15910" title="https://jira.suse.com/browse/PED-15910" type="jira"/>
    </references>
    <description>
This update for rsyslog fixes the following issue:

- add the rsyslog-module-ossl (openssl TLS support).
</description>
    <pkglist>
      <collection>
        <package name="rsyslog" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="src" src="src/rsyslog-8.2406.0-150700.3.2.1.src.rpm">
          <filename>rsyslog-8.2406.0-150700.3.2.1.src.rpm</filename>
        </package>
        <package name="rsyslog-module-gssapi" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-gssapi-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-gssapi-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-gtls" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-gtls-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-gtls-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-mmnormalize" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-mmnormalize-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-mmnormalize-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-mysql" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-mysql-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-mysql-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-pgsql" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-pgsql-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-pgsql-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-relp" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-relp-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-relp-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-snmp" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-snmp-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-snmp-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
        <package name="rsyslog-module-udpspoof" epoch="0" version="8.2406.0" release="150700.3.2.1" arch="x86_64" src="x86_64/rsyslog-module-udpspoof-8.2406.0-150700.3.2.1.x86_64.rpm">
          <filename>rsyslog-module-udpspoof-8.2406.0-150700.3.2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1545</id>
    <title>Recommended update for ipmitool</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776849676"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259310" id="1259310" title="ipmievd.service fails due to wrong PIDFile" type="bugzilla"/>
    </references>
    <description>This update for ipmitool fixes the following issue:

- Fix bad pid file creation in ipmievd (bsc#1259310).</description>
    <pkglist>
      <collection>
        <package name="ipmitool" epoch="0" version="1.8.19.13.gbe11d94" release="150700.3.3.1" arch="src" src="src/ipmitool-1.8.19.13.gbe11d94-150700.3.3.1.src.rpm">
          <filename>ipmitool-1.8.19.13.gbe11d94-150700.3.3.1.src.rpm</filename>
        </package>
        <package name="ipmitool-bmc-snmp-proxy" epoch="0" version="1.8.19.13.gbe11d94" release="150700.3.3.1" arch="noarch" src="noarch/ipmitool-bmc-snmp-proxy-1.8.19.13.gbe11d94-150700.3.3.1.noarch.rpm">
          <filename>ipmitool-bmc-snmp-proxy-1.8.19.13.gbe11d94-150700.3.3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1219</id>
    <title>Recommended update for libteam</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1775663743"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258224" id="1258224" title="teamd incorrect Slave MAC (dev_addr) in LACP on SLES15SP7" type="bugzilla"/>
    </references>
    <description>This update for libteam fixes the following issues:

- Fix: teamd incorrect Slave MAC (dev_addr) in LACP on SLES15SP7 (bsc#1258224):
    * teamd: 
        + add port_hwaddr_changed for ab runner
        + add port_hwaddr_changed for lacp runner
        + add port_hwaddr_changed for lb runner
</description>
    <pkglist>
      <collection>
        <package name="libteam" epoch="0" version="1.27" release="150000.4.18.1" arch="src" src="src/libteam-1.27-150000.4.18.1.src.rpm">
          <filename>libteam-1.27-150000.4.18.1.src.rpm</filename>
        </package>
        <package name="libteam-tools" epoch="0" version="1.27" release="150000.4.18.1" arch="x86_64" src="x86_64/libteam-tools-1.27-150000.4.18.1.x86_64.rpm">
          <filename>libteam-tools-1.27-150000.4.18.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1378</id>
    <title>Security update for kea</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776323986"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3608" id="CVE-2026-3608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3608" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260380" id="1260380" title="VUL-0: CVE-2026-3608: kea: stack overflow via maliciously crafted message to the kea-ctrl-agent,  kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons" type="bugzilla"/>
    </references>
    <description>This update for kea fixes the following issues:

Update to release 2.6.5:

  * A large number of bracket pairs in a JSON payload directed to
    any endpoint would result in a stack overflow, due to recursive
    calls when parsing the JSON. This has been fixed.
    (CVE-2026-3608)
    [bsc#1260380]
  * A null dereference is now no longer possible when configuring
    the Control Agent with a socket that lacks the mandatory
    socket-name entry.
  * UNIX sockets are now created as group-writable.
  * Corrected an issue in logging configuration when parsing
    &quot;syslog:&quot;
  * Earlier Kea versions could crash when handling misconfigured
    global reservations. This has been fixed.
  * Support for recent versions of Sphinx has been added.
</description>
    <pkglist>
      <collection>
        <package name="kea" epoch="0" version="2.6.5" release="150700.3.6.1" arch="src" src="src/kea-2.6.5-150700.3.6.1.src.rpm">
          <filename>kea-2.6.5-150700.3.6.1.src.rpm</filename>
        </package>
        <package name="kea" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/kea-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>kea-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kea-devel" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/kea-devel-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>kea-devel-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="kea-doc" epoch="0" version="2.6.5" release="150700.3.6.1" arch="noarch" src="noarch/kea-doc-2.6.5-150700.3.6.1.noarch.rpm">
          <filename>kea-doc-2.6.5-150700.3.6.1.noarch.rpm</filename>
        </package>
        <package name="kea-hooks" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/kea-hooks-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>kea-hooks-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-asiodns49" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-asiodns49-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-asiodns49-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-asiolink72" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-asiolink72-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-asiolink72-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-cc69" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-cc69-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-cc69-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-cfgclient67" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-cfgclient67-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-cfgclient67-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-cryptolink50" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-cryptolink50-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-cryptolink50-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-d2srv47" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-d2srv47-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-d2srv47-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-database62" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-database62-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-database62-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcp++92" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-dhcp++92-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-dhcp++92-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcp_ddns57" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-dhcp_ddns57-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-dhcp_ddns57-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-dhcpsrv112" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-dhcpsrv112-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-dhcpsrv112-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-dns++57" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-dns++57-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-dns++57-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-eval69" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-eval69-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-eval69-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-exceptions33" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-exceptions33-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-exceptions33-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-hooks102" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-hooks102-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-hooks102-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-http72" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-http72-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-http72-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-log61" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-log61-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-log61-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-mysql71" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-mysql71-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-mysql71-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-pgsql71" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-pgsql71-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-pgsql71-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-process76" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-process76-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-process76-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-stats41" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-stats41-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-stats41-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-tcp19" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-tcp19-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-tcp19-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-util-io0" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-util-io0-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-util-io0-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libkea-util87" epoch="0" version="2.6.5" release="150700.3.6.1" arch="x86_64" src="x86_64/libkea-util87-2.6.5-150700.3.6.1.x86_64.rpm">
          <filename>libkea-util87-2.6.5-150700.3.6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1351</id>
    <title>Security update for bind</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776260204"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259202" id="1259202" title="VUL-1: bind: use-after-free error in `dns_client_resolve()` triggered by a DNAME response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260567" id="1260567" title="VUL-0: CVE-2026-3104: bind: memory leak in code preparing DNSSEC proofs of non-existence allows for DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260568" id="1260568" title="VUL-0: CVE-2026-3119: bind: authenticated queries containing a TKEY record may cause `named` to terminate unexpectedly" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260569" id="1260569" title="VUL-0: CVE-2026-3591: bind: stack use-after-return flaw in SIG(0) handling code allows for ACL bypass" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260805" id="1260805" title="VUL-0: CVE-2026-1519: bind: maliciously crafted DNSSEC-validated zone can lead to denial of service" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1519" id="CVE-2026-1519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1519" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3104" id="CVE-2026-3104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3104" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3119" id="CVE-2026-3119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3119" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3591" id="CVE-2026-3591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3591" type="cve"/>
    </references>
    <description>This update for bind fixes the following issues:

Security issues:

- CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805).
- CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for DoS (bsc#1260567).
- CVE-2026-3119: authenticated queries containing a TKEY record may cause `named` to terminate unexpectedly
  (bsc#1260568).
- CVE-2026-3591: stack use-after-return flaw in SIG(0) handling code allows for ACL bypass (bsc#1260569).
- use-after-free error in `dns_client_resolve()` triggered by a DNAME response (bsc#1259202).

Upgrade to release 9.20.21
 Security Fixes:
 * Fix unbounded NSEC3 iterations when validating referrals to
 unsigned delegations.
 (CVE-2026-1519)
 [bsc#1260805]
 * Fix memory leaks in code preparing DNSSEC proofs of
 non-existence.
 (CVE-2026-3104)
 [bsc#1260567]
 * Prevent a crash in code processing queries containing a TKEY
 record.
 (CVE-2026-3119)
 [bsc#1260568]
 * Fix a stack use-after-return flaw in SIG(0) handling code.
 (CVE-2026-3591)
 [bsc#1260569]
 * Fix a use-after-free error in dns_client_resolve() triggered by
 a DNAME response. This issue only affected the delv tool and it
 has now been fixed.
 [bsc#1259202]
 Feature Changes:
 * Record query time for all dnstap responses.
 * Optimize TCP source port selection on Linux.
 Bug Fixes:
 * Fix the handling of key statements defined inside views.
 * Fix an assertion failure triggered by non-minimal IXFRs.
 * Fix a crash when retrying a NOTIFY over TCP.
 * Fetch loop detection improvements.
 * Randomize nameserver selection.
 * Fix dnstap logging of forwarded queries.
 * A stale answer could have been served in case of multiple
 upstream failures when following CNAME chains. This has been
 fixed.
 * Fail DNSKEY validation when supported but invalid DS is found.
 * Importing an invalid SKR file might corrupt stack memory.
 * Return FORMERR for queries with the EDNS Client Subnet FAMILY
 field set to 0.
 * Fix inbound IXFR performance regression.
 * Make catalog zone names and member zones' entry names
 case-insensitive.
 * Fix implementation of BRID and HHIT record types.
 * Fix implementation of DSYNC record type.
 * Fix response policy and catalog zones to work with $INCLUDE
 directive.
</description>
    <pkglist>
      <collection>
        <package name="bind" epoch="0" version="9.20.21" release="150700.3.18.1" arch="src" src="src/bind-9.20.21-150700.3.18.1.src.rpm">
          <filename>bind-9.20.21-150700.3.18.1.src.rpm</filename>
        </package>
        <package name="bind" epoch="0" version="9.20.21" release="150700.3.18.1" arch="x86_64" src="x86_64/bind-9.20.21-150700.3.18.1.x86_64.rpm">
          <filename>bind-9.20.21-150700.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="bind-doc" epoch="0" version="9.20.21" release="150700.3.18.1" arch="noarch" src="noarch/bind-doc-9.20.21-150700.3.18.1.noarch.rpm">
          <filename>bind-doc-9.20.21-150700.3.18.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1388</id>
    <title>Security update for libtpms</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776331107"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133" id="CVE-2025-49133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244528" id="1244528" title="VUL-0: CVE-2025-49133: libtpms: potential out of bounds (OOB) read vulnerability" type="bugzilla"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528)
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.9.6" release="150600.3.3.1" arch="src" src="src/libtpms-0.9.6-150600.3.3.1.src.rpm">
          <filename>libtpms-0.9.6-150600.3.3.1.src.rpm</filename>
        </package>
        <package name="libtpms-devel" epoch="0" version="0.9.6" release="150600.3.3.1" arch="x86_64" src="x86_64/libtpms-devel-0.9.6-150600.3.3.1.x86_64.rpm">
          <filename>libtpms-devel-0.9.6-150600.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.9.6" release="150600.3.3.1" arch="x86_64" src="x86_64/libtpms0-0.9.6-150600.3.3.1.x86_64.rpm">
          <filename>libtpms0-0.9.6-150600.3.3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1367</id>
    <title>Security update for mariadb</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776263650"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32710" id="CVE-2026-32710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32710" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260081" id="1260081" title="VUL-0: CVE-2026-32710: mariadb,mariadb-100: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code execution" type="bugzilla"/>
    </references>
    <description>This update for mariadb fixes the following issues:

Update to version 11.8.6.

- https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6
- https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6

Security issues fixed:

- CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code execution
  (bsc#1260081).
</description>
    <message>Updating mariadb might impact the database service. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="libmariadbd-devel" epoch="0" version="11.8.6" release="150700.3.12.1" arch="x86_64" src="x86_64/libmariadbd-devel-11.8.6-150700.3.12.1.x86_64.rpm">
          <filename>libmariadbd-devel-11.8.6-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libmariadbd19" epoch="0" version="11.8.6" release="150700.3.12.1" arch="x86_64" src="x86_64/libmariadbd19-11.8.6-150700.3.12.1.x86_64.rpm">
          <filename>libmariadbd19-11.8.6-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.6" release="150700.3.12.1" arch="src" src="src/mariadb-11.8.6-150700.3.12.1.src.rpm">
          <filename>mariadb-11.8.6-150700.3.12.1.src.rpm</filename>
        </package>
        <package name="mariadb" epoch="0" version="11.8.6" release="150700.3.12.1" arch="x86_64" src="x86_64/mariadb-11.8.6-150700.3.12.1.x86_64.rpm">
          <filename>mariadb-11.8.6-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-client" epoch="0" version="11.8.6" release="150700.3.12.1" arch="x86_64" src="x86_64/mariadb-client-11.8.6-150700.3.12.1.x86_64.rpm">
          <filename>mariadb-client-11.8.6-150700.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="mariadb-errormessages" epoch="0" version="11.8.6" release="150700.3.12.1" arch="noarch" src="noarch/mariadb-errormessages-11.8.6-150700.3.12.1.noarch.rpm">
          <filename>mariadb-errormessages-11.8.6-150700.3.12.1.noarch.rpm</filename>
        </package>
        <package name="mariadb-tools" epoch="0" version="11.8.6" release="150700.3.12.1" arch="x86_64" src="x86_64/mariadb-tools-11.8.6-150700.3.12.1.x86_64.rpm">
          <filename>mariadb-tools-11.8.6-150700.3.12.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1341</id>
    <title>Recommended update for wxWidgets-3_0</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776241102"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260578" id="1260578" title="https://bugzilla.suse.com/show_bug.cgi?id=1260578" type="bugzilla"/>
    </references>
    <description>This update for wxWidgets-3_0 fixes the following issues:

- Included wxWidgets-lang and libwx_baseu-suse3_0_5 in PackageHub (no source changes) (bsc#1260578)
</description>
    <pkglist>
      <collection>
        <package name="libwx_baseu-suse3_0_5" epoch="0" version="3.0.5.1" release="150200.11.9.1" arch="x86_64" src="x86_64/libwx_baseu-suse3_0_5-3.0.5.1-150200.11.9.1.x86_64.rpm">
          <filename>libwx_baseu-suse3_0_5-3.0.5.1-150200.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="libwx_gtk2u_core-suse3_0_5" epoch="0" version="3.0.5.1" release="150200.11.9.1" arch="x86_64" src="x86_64/libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.9.1.x86_64.rpm">
          <filename>libwx_gtk2u_core-suse3_0_5-3.0.5.1-150200.11.9.1.x86_64.rpm</filename>
        </package>
        <package name="wxWidgets-3_0" epoch="0" version="3.0.5.1" release="150200.11.9.1" arch="src" src="src/wxWidgets-3_0-3.0.5.1-150200.11.9.1.src.rpm">
          <filename>wxWidgets-3_0-3.0.5.1-150200.11.9.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1569</id>
    <title>Recommended update for opensm</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776947509"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258143" id="1258143" title="Running opensm results in very small MTU" type="bugzilla"/>
    </references>
    <description>This update for opensm fixes the following issue:

- Fix issue with NDR switches related to MTU packet size (bsc#1258143).</description>
    <pkglist>
      <collection>
        <package name="libopensm9" epoch="0" version="3.3.24" release="150500.8.3.2" arch="x86_64" src="x86_64/libopensm9-3.3.24-150500.8.3.2.x86_64.rpm">
          <filename>libopensm9-3.3.24-150500.8.3.2.x86_64.rpm</filename>
        </package>
        <package name="libosmcomp5" epoch="0" version="3.3.24" release="150500.8.3.2" arch="x86_64" src="x86_64/libosmcomp5-3.3.24-150500.8.3.2.x86_64.rpm">
          <filename>libosmcomp5-3.3.24-150500.8.3.2.x86_64.rpm</filename>
        </package>
        <package name="libosmvendor5" epoch="0" version="3.3.24" release="150500.8.3.2" arch="x86_64" src="x86_64/libosmvendor5-3.3.24-150500.8.3.2.x86_64.rpm">
          <filename>libosmvendor5-3.3.24-150500.8.3.2.x86_64.rpm</filename>
        </package>
        <package name="opensm" epoch="0" version="3.3.24" release="150500.8.3.2" arch="src" src="src/opensm-3.3.24-150500.8.3.2.src.rpm">
          <filename>opensm-3.3.24-150500.8.3.2.src.rpm</filename>
        </package>
        <package name="opensm" epoch="0" version="3.3.24" release="150500.8.3.2" arch="x86_64" src="x86_64/opensm-3.3.24-150500.8.3.2.x86_64.rpm">
          <filename>opensm-3.3.24-150500.8.3.2.x86_64.rpm</filename>
        </package>
        <package name="opensm-devel" epoch="0" version="3.3.24" release="150500.8.3.2" arch="x86_64" src="x86_64/opensm-devel-3.3.24-150500.8.3.2.x86_64.rpm">
          <filename>opensm-devel-3.3.24-150500.8.3.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1439</id>
    <title>Security update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776433411"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261273" id="1261273" title="VUL-0: CVE-2026-34956: openvswitch,openvswitch3: Invalid memory access in conntrack FTP alg." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34956" id="CVE-2026-34956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34956" type="cve"/>
    </references>
    <description>This update for openvswitch fixes the following issue:

Security updates:

- CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).

Other updates:

- Update openvswitch to 3.5.4
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_5-0" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/libopenvswitch-3_5-0-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>libopenvswitch-3_5-0-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="libovn-25_03-0" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/libovn-25_03-0-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>libovn-25_03-0-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.4" release="150700.41.15.1" arch="src" src="src/openvswitch-3.5.4-150700.41.15.1.src.rpm">
          <filename>openvswitch-3.5.4-150700.41.15.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-devel" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-devel-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-devel-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-ipsec" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-ipsec-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-ipsec-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-pki" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-pki-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-pki-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-test" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-test-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-test-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-vtep" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/openvswitch-vtep-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>openvswitch-vtep-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-central" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-central-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-central-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-devel" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-devel-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-devel-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-docker" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-docker-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-docker-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-host" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-host-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-host-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="ovn-vtep" epoch="0" version="25.03.2" release="150700.41.15.1" arch="x86_64" src="x86_64/ovn-vtep-25.03.2-150700.41.15.1.x86_64.rpm">
          <filename>ovn-vtep-25.03.2-150700.41.15.1.x86_64.rpm</filename>
        </package>
        <package name="python3-openvswitch" epoch="0" version="3.5.4" release="150700.41.15.1" arch="x86_64" src="x86_64/python3-openvswitch-3.5.4-150700.41.15.1.x86_64.rpm">
          <filename>python3-openvswitch-3.5.4-150700.41.15.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1551</id>
    <title>Recommended update for libteam</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776853523"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260370" id="1260370" title="teamd LACP initialization failure (-ENOMEM / Race condition) two BCM57414 25Gbps cards (4port bond)" type="bugzilla"/>
    </references>
    <description>This update for libteam fixes the following issues:

- Fix: teamd LACP initialization failure (-ENOMEM / Race condition) two BCM57414 25Gbps cards (bsc#1260370)
     * libteam: double NETLINK_RCVBUF to fix -ENOMEM error
</description>
    <pkglist>
      <collection>
        <package name="libteam" epoch="0" version="1.27" release="150000.4.21.1" arch="src" src="src/libteam-1.27-150000.4.21.1.src.rpm">
          <filename>libteam-1.27-150000.4.21.1.src.rpm</filename>
        </package>
        <package name="libteam-tools" epoch="0" version="1.27" release="150000.4.21.1" arch="x86_64" src="x86_64/libteam-tools-1.27-150000.4.21.1.x86_64.rpm">
          <filename>libteam-tools-1.27-150000.4.21.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>SUSE-SLE-Module-Server-Applications-15-SP7-2026-1426</id>
    <title>Recommended update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates SLE-Module-Server-Applications 15-SP7 x86 64</release>
    <issued date="1776416208"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249385" id="1249385" title="SLES16 RC2: HST - Can not install SLES 16 RC2, using LiveOS and squashfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259543" id="1259543" title="L3: xen vm with two redundant drives for booting - grub double free at 0x1fdde4500" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221126" id="1221126" title="cannot boot system: Base of Data Stack corrupted" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
    * add mandatoryminstallmdevicemcheckmformPowerPC
- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
    * use net config for boot location instead of
- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
    * btrfs: add ability to boot from subvolumes
    * btrfs: get default subvolume
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12" release="150700.19.29.1" arch="src" src="src/grub2-2.12-150700.19.29.1.src.rpm">
          <filename>grub2-2.12-150700.19.29.1.src.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12" release="150700.19.29.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12-150700.19.29.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12-150700.19.29.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
