CLSA-2026-1777046565 ImageMagick: Fix of 5 CVEs

CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit...

openSUSE 16 Security Update : xwayland (openSUSE-SU-2026:20560-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20560-1 advisory. - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap bsc1260922. - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom bsc1260923. -...

Security update for xwayland (important)

openSUSE security update: security update for xwayland ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20560-1 Rating: important References: bsc1260922 bsc1260923 bsc1260924 bsc1260925 bsc1260926 Cross-References: CVE-2026-33999 CVE-2026-34000...

Security update for kubo (moderate)

openSUSE Security Update: Security update for kubo Announcement ID: openSUSE-SU-2026:0135-1 Rating: moderate References: 1241776 1251419 1251613 1253857 1261818 Cross-References: CVE-2025-22872 CVE-2025-47911 CVE-2025-58181 CVE-2025-58190 CVE-2026-35480 CVSS scores: CVE-2025-22872 SUSE: 6.3...

CLSA-2026-1776349106 libtiff: Fix of 5 CVEs

CVE-2022-34526: fix stack buffer overflow in TIFFVGetField via invalid codec-specific tag - CVE-2023-2908: fix null pointer dereference in countInkNamesString in tifdir.c - CVE-2023-6277: prevent out-of-memory attacks by comparing allocation size with file size - CVE-2023-1916: fix out-of-bounds...

goshs-2.0.0-1.1 on GA media (moderate)

goshs-2.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10542-1 Rating: moderate Cross-References: CVE-2026-35392 CVE-2026-35393 CVE-2026-35471 CVE-2026-40188 CVE-2026-40189 CVSS scores: CVE-2026-40188 SUSE : 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N CVE-2026-40188 SUSE : 6.3...

python313-Django6-6.0.4-1.1 on GA media (moderate)

python313-Django6-6.0.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10517-1 Rating: moderate Cross-References: CVE-2026-33033 CVE-2026-33034 CVE-2026-3902 CVE-2026-4277 CVE-2026-4292 CVSS scores: CVE-2026-33033 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-33033 SUSE : 6....

MozillaFirefox-149.0.2-1.1 on GA media (moderate)

MozillaFirefox-149.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10511-1 Rating: moderate Cross-References: CVE-2026-5731 CVE-2026-5732 CVE-2026-5733 CVE-2026-5734 CVE-2026-5735 CVSS scores: CVE-2026-5731 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-5732 SUSE : 8.8...

opensc-0.27.1-1.1 on GA media (moderate)

opensc-0.27.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10475-1 Rating: moderate Cross-References: CVE-2025-13763 CVE-2025-49010 CVE-2025-66037 CVE-2025-66038 CVE-2025-66215 CVSS scores: CVE-2025-49010 SUSE : 3.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2025-49010 SUSE : 1...

python311-lmdb-2.1.1-1.1 on GA media (moderate)

python311-lmdb-2.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10430-1 Rating: moderate Cross-References: CVE-2019-16224 CVE-2019-16225 CVE-2019-16226 CVE-2019-16227 CVE-2019-16228 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...

python313-3.13.12-1.1 on GA media (moderate)

python313-3.13.12-1.1 on GA media Announcement ID: openSUSE-SU-2026:10223-1 Rating: moderate Cross-References: CVE-2025-11468 CVE-2025-15282 CVE-2026-0672 CVE-2026-0865 CVE-2026-1299 CVSS scores: CVE-2025-11468 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-11468 SUSE : 7.1...

PT-2026-20492

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.13 and earlier Description An allowlist bypass exists in the OpenClaw npm package. This flaw causes a mismatch between the commands that are verified and the commands that are actually executed, potentially leading to...

python315-3.15.0~a3-4.1 on GA media (moderate)

python315-3.15.0a3-4.1 on GA media Announcement ID: openSUSE-SU-2026:10152-1 Rating: moderate Cross-References: CVE-2025-12781 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2026-0865 CVSS scores: CVE-2025-12781 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-12781 SUSE : 2...

CLSA-2026-1770115899 java-17-openjdk: Fix of 5 CVEs

Update to jdk-17.0.18+8 GA - CVE-2026-21925: improve JMX connections - CVE-2026-21933: improve HttpServer Request handling - CVE-2026-21945: enhance Certificate Checking - CVE-2025-64720: libpng: fix buffer overflow - CVE-2025-65018: libpng: fix heap buffer overflow...

Security update for ImageMagick (important)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20118-1 Rating: important References: bsc1254435 bsc1254820 bsc1255821 bsc1255822 bsc1255823 Cross-References: CVE-2025-65955 CVE-2025-66628...

MiracleLinux 9 : kernel-5.14.0-611.24.1.el9_7 (AXSA:2026-117:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-117:06 advisory. kernel: drm/xe: Make dma-fences compliant with the safe access rules CVE-2025-38703 kernel: smb: client: let recvdone verify dataoffset, datalength a...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2018-14634link is external Linux Kernel Integer Overflow Vulnerability CVE-2025-52691link is external SmarterTools SmarterMail Unrestricted Upload of File with...

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1254451. CVE-2022-50490: bpf: Propagate error from htablockbucket to userspa...

MiracleLinux 8 : java-11-openjdk-11.0.23.0.9-3.el8 (AXSA:2024-7715:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7715:09 advisory. OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122...

MiracleLinux 7 : kernel-3.10.0-1160.36.2.el7 (AXSA:2021-2250:14)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2250:14 advisory. kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: use-after-free in net/bluetooth/hcievent.c when...