OPENSUSE-SU-2026:10854-1 perl-XML-LibXML-2.0212-1.1 on GA media

These are all security issues fixed in the perl-XML-LibXML-2.0212-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10851-1 nano-9.0-2.1 on GA media

These are all security issues fixed in the nano-9.0-2.1 package on the GA media of openSUSE Tumbleweed...

hauler-1.4.3-3.1 on GA media (moderate)

hauler-1.4.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:10843-1 Rating: moderate Cross-References: CVE-2026-39827 CVE-2026-39834 CVE-2026-42508 CVE-2026-46597 CVSS scores: CVE-2026-39827 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-39827 SUSE : 7.1...

OPENSUSE-SU-2026:10857-1 rsync-3.4.3-1.1 on GA media

These are all security issues fixed in the rsync-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-43022

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.2-1.1 Description Decoding a paletted BMP file with an out-of-range palette index causes a panic when accessing pixels in the invalid image. Recommendations Update to version 1.74.2-1.1...

OPENSUSE-SU-2026:10850-1 jq-1.8.1-3.1 on GA media

These are all security issues fixed in the jq-1.8.1-3.1 package on the GA media of openSUSE Tumbleweed...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the NGReset Message Handler process. An attacker can cause memory corruption and potentially impact confidentiality, integrity, and availability by sending specially crafted messages remotely. Remediation Upgrade...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow in the NGSetupRequest process. An attacker can cause memory corruption and potentially compromise confidentiality, integrity, and availability by sending specially crafted requests remotely. Remediation Upgrade...

OPENSUSE-SU-2026:10847-1 rqlite-10.1.0-1.1 on GA media

These are all security issues fixed in the rqlite-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10845-1 mcphost-0.34.0-5.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10843-1 hauler-1.4.3-3.1 on GA media

These are all security issues fixed in the hauler-1.4.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10841-1 chromedriver-148.0.7778.178-1.1 on GA media

These are all security issues fixed in the chromedriver-148.0.7778.178-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-42809

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.5.4 Description In the Kerberos authentication method, the GET handler or the use of an Authorization: Negotiate header causes the response to include a logical.Auth object alongside an error message. This leads to...

OPENSUSE-SU-2026:10838-1 python311-urllib3_1-1.26.20-6.1 on GA media

These are all security issues fixed in the python311-urllib31-1.26.20-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10840-1 libsystemd0-260.1-2.1 on GA media

These are all security issues fixed in the libsystemd0-260.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10832-1 freerdp-3.26.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10833-1 haveged-1.9.21-1.1 on GA media

These are all security issues fixed in the haveged-1.9.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10831-1 flux2-cli-2.8.8-1.1 on GA media

These are all security issues fixed in the flux2-cli-2.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: The link ID is cleared from the bitmap during link deletion after cleanup. Currently, during link deletion, the link ID is first removed from the validlinks bitmap before any cleanup operations are performed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/cio: Verify the availability of the driver for the pathevent call. If no driver is attached to a device, or if the driver does not provide the pathevent function, an FCES path-event on this device could result in a...