* Thu Sep 24 2026 schwab@suse.de
- resolv-search-list-trunc.patch: resolv: Fix assertion failure on search
list truncation (CVE-2026-8674, bsc#1281297, BZ #31026)
- elf-origin-open-normalized.patch: elf: Open the normalized $ORIGIN rpath
in AT_SECURE programs (CVE-2026-86805, bsc#1282509, BZ #34360)
* Mon Aug 31 2026 schwab@suse.de
- strfmon-right-just.patch: stdlib: Fix right-justification in strfmon
(CVE-2026-19499, bsc#1276892, BZ #34510)
- tdelete-oob-write.patch: misc: Fix out-of-bounds array write in tdelete
(CVE-2026-19542, bsc#1276946, BZ #34506)
- sjisx-pending-char-reset.patch: iconvdata: SHIFT_JISX0213 decoding lacks
pending character reset (CVE-2026-77117, bsc#1277921, BZ #34556)
- eucjisx-pending-char-reset.patch: iconvdata: EUC_JISX0213 decoding lacks
pending character reset (CVE-2026-80489, bsc#1277922, BZ #34568)
- libio-fopen-ccs.patch: libio: Fix CVE-2026-18374 heap buffer overflow in
ccs= handling (CVE-2026-18374, bsc#1277262, BZ #34574)
* Thu Aug 27 2026 giuliano.belinassi@suse.com
- Add -flive-patching=inline-clone to avoid untraceable inter-procedural
optimizations (bsc#1277247).
* Tue Aug 11 2026 schwab@suse.de
- wordexp-wrde-append-preserve-state.patch: posix: Fix wordexp WRDE_APPEND
to preserve state on non-NOSPACE errors (CVE-2026-6368, bsc#1274726, BZ
[#34090])
- wordexp-tilde-stack-ovfl.patch: posix: Fix stack overflow in wordexp
tilde expansion (CVE-2026-6791, bsc#1274723, BZ #34091)
* Mon Jun 22 2026 schwab@suse.de
- resolv-sprintrrf-unkown-types.patch: resolv: More types as unknown in
ns_sprintrrf (CVE-2026-5435, bsc#1263656, BZ #34033)
- resolv-sprintrrf-inet-ntop-check.patch: resolv: Check for inet_ntop
failure in ns_sprintrrf
- resolv-sprintrrf-buffer-overreads.patch: resolv: Fix buffer overreads in
ns_sprintrrf (CVE-2026-6238, bsc#1263658, BZ #34069)
* Mon May 11 2026 schwab@suse.de
- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
(CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)
* Tue May 05 2026 schwab@suse.de
- ibm139x-pending-char-state.patch: Use pending character state in
IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)
* Mon Mar 30 2026 schwab@suse.de
- resolv-count-resource-records.patch: resolv: Count records correctly
(CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
(CVE-2026-4438, bsc#1260082, BZ #34015)
* Tue Feb 17 2026 schwab@suse.de
- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
__nss_database_get (bsc#1258319, BZ #28940)
* Tue Jan 20 2026 schwab@suse.de
- memalign-overflow-check.patch: memalign: reinstate alignment overflow
check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
(CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
(CVE-2025-15281, bsc#1257005, BZ #33814)