Security update for gd

This update for gd fixes the following issue: CVE-2026-9672: security issues in libgd bsc1273101. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

SUSE-SU-2026:23136-1 Security update for python-ujson

This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump can lead to memory leaks bsc1270301...

Malicious Package

Overview @wagnibot/bsc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Security update for ImageMagick

This update for ImageMagick fixes the following issue Extend CVE-2026-56379 patch by f63c78b bsc1268878. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3253-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3253-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...

Malicious Package

Overview @wagnibot/bsc-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Security update for python-sqlparse (moderate)

openSUSE security update: security update for python-sqlparse ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21343-1 Rating: moderate References: bsc1268597 Affected Products: openSUSE Leap 16.0...

SUSE-SU-2026:2752-1 Security update for python3-lxml

This update for python3-lxml fixes the following issue - CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read bsc1263254...

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

SummaryThe Binary Stream Capture BSC component exposes an unauthenticated HTTP API for dynamically creating packet capture “handlers.” Because the code blindly trusts path‑related form fields, a remote client can:- Bypass the configured log root and direct BSC to log to arbitrary filesystem...

PT-2026-47089

Name of the Vulnerable Software and Affected Versions AIT-Core versions prior to 3.1.1 AIT-Core versions 2.x prior to 2.6.1 Description The Binary Stream Capture BSC component features an unauthenticated HTTP API for creating packet capture handlers. The system blindly trusts path-related form...

SUSE-RU-2026:21781-1 Recommended update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix one issue The following non security issue was fixed: - CVE-2026-46333: Fixed logic bug in the Linux kernel's ptracemayaccess function bsc1265308...

SUSE-SU-2026:21696-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes one security issue The following security issue was fixed: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459...

Security update for freeipmi

This update for freeipmi fixes the following issue: CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses bsc1260414. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:21378-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks sometimes soft-fail...

OPENSUSE-SU-2026:20512-1 Security update for pcre2

This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in matchref due to missing boundary restoration in SCS bsc1248842...

SUSE SLES16 Security Update : cockpit-repos (SUSE-SU-2026:20997-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:20997-1 advisory. This update for cockpit-repos fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive...

SUSE-SU-2026:1178-1 Security update for libsoup

This update for libsoup fixes the following issue: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read bsc1256418...

SUSE-SU-2026:0783-1 Security update for zlib

This update for zlib fixes the following issue: - CVE-2026-27171: Fixed infinite loop via the crc32combine64 and crc32combinegen64 functions due to missing checks for negative lengths bsc1258392...

SUSE-SU-2026:0599-1 Security update for libpng12

This update for libpng12 fixes the following issues: - CVE-2026-25646: heap buffer overflow vulnerability in pngsetdither/pngsetquantize bsc1258020...

SUSE SLES15 / openSUSE 15 Security Update : python-wheel (SUSE-SU-2026:0460-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0460-1 advisory. - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification bsc1257100. Tenable has...