OPENSUSE-SU-2026:10137-1 java-21-openj9-21.0.10.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10132-1 freerdp-3.22.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10129-1 libmlt++-7-7-7.36.1-1.1 on GA media

These are all security issues fixed in the libmlt++-7-7-7.36.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10125-1 python311-django-storages-1.14.6-1.1 on GA media

These are all security issues fixed in the python311-django-storages-1.14.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10120-1 MozillaFirefox-147.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-147.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10121-1 chromedriver-144.0.7559.109-1.1 on GA media

These are all security issues fixed in the chromedriver-144.0.7559.109-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10112-1 dirmngr-2.5.17-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.17-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-1377

CVE-2026-1377 affects the WordPress plugin imwptip

WordPress plugin imwptip has a cross-site request forgeing vulnerability.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

zot-registry-2.1.14-1.1 on GA media (moderate)

zot-registry-2.1.14-1.1 on GA media Announcement ID: openSUSE-SU-2026:10100-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7...

coredns-1.14.1-1.1 on GA media (moderate)

coredns-1.14.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10101-1 Rating: moderate Cross-References: CVE-2025-61728 CVE-2025-68119 CVSS scores: CVE-2025-61728 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-61728 SUSE : 6.7...

WordPress AhaChat Messenger Marketing plugin <= 1.1 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Rapid0nion in WordPress Plugin AhaChat Messenger Marketing versions = 1.1...

WordPress AhaChat Messenger Marketing plugin <= 1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Yevgen Goncharuk in WordPress Plugin AhaChat Messenger Marketing versions = 1.1...

OPENSUSE-SU-2026:10102-1 libopencc1_2-1.2.0-1.1 on GA media

These are all security issues fixed in the libopencc12-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10094-1 libmatio-devel-1.5.30-1.1 on GA media

These are all security issues fixed in the libmatio-devel-1.5.30-1.1 package on the GA media of openSUSE Tumbleweed...

WordPress plugin AhaChat Messenger Marketing has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

OPENSUSE-SU-2026:10090-1 google-osconfig-agent-20260119.00-1.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20260119.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10098-1 tlp-1.8.0-1.1 on GA media

These are all security issues fixed in the tlp-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10088-1 cups-2.4.16-1.1 on GA media

These are all security issues fixed in the cups-2.4.16-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-14629 Alchemist Ajax Upload <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Media File Deletion

The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the 'deletefile' function in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary WordPress media...