OPENSUSE-SU-2026:10255-1 docker-stable-24.0.9_ce-17.1 on GA media

These are all security issues fixed in the docker-stable-24.0.9ce-17.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10254-1 cockpit-tukit-0.1.7~git0.61e54f1-3.1 on GA media

These are all security issues fixed in the cockpit-tukit-0.1.7git0.61e54f1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10248-1 MozillaThunderbird-140.8.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10252-1 cockpit-repos-4.7-4.1 on GA media

These are all security issues fixed in the cockpit-repos-4.7-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10251-1 cockpit-packages-4.1-4.1 on GA media

These are all security issues fixed in the cockpit-packages-4.1-4.1 package on the GA media of openSUSE Tumbleweed...

python311-Django4-4.2.28-1.1 on GA media (moderate)

python311-Django4-4.2.28-1.1 on GA media Announcement ID: openSUSE-SU-2026:10247-1 Rating: moderate Cross-References: CVE-2025-13473 CVE-2025-14550 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 CVSS scores: CVE-2025-13473 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

OPENSUSE-SU-2026:10256-1 regclient-0.11.2-1.1 on GA media

These are all security issues fixed in the regclient-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10243-1 freerdp2-2.11.7-5.1 on GA media

These are all security issues fixed in the freerdp2-2.11.7-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10247-1 python311-Django4-4.2.28-1.1 on GA media

These are all security issues fixed in the python311-Django4-4.2.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10246-1 libsoup-2_4-1-2.74.3-17.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-17.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10245-1 libsoup-3_0-0-3.6.6-1.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10241-1 cacti-1.2.30+git231.bca15e70c-1.1 on GA media

These are all security issues fixed in the cacti-1.2.30+git231.bca15e70c-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10235-1 cosign-3.0.5-1.1 on GA media

These are all security issues fixed in the cosign-3.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10238-1 python311-PyPDF2-2.11.1-4.1 on GA media

These are all security issues fixed in the python311-PyPDF2-2.11.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10240-1 weblate-5.16-1.1 on GA media

These are all security issues fixed in the weblate-5.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10232-1 cosign-3.0.4-2.1 on GA media

These are all security issues fixed in the cosign-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-23619

GFI MailEssentials AI (versions prior to 22.4) contains a stored cross-site scripting vulnerability in the Local Domains settings page. An authenticated user can submit HTML/JavaScript via ctl00$ContentPlaceHolder1$Pv3$txtDescription on /MailEssentials/pages/MailSecurity/general.aspx, which is st...

OPENSUSE-SU-2026:10228-1 syft-1.42.1-1.1 on GA media

These are all security issues fixed in the syft-1.42.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-20575

Name of the Vulnerable Software and Affected Versions GDPR Cookie Consent plugin for WordPress versions up to and including 4.1.2 Description The plugin is susceptible to unauthorized data access because of a missing capability check on the /gdpr/v1/settings API endpoint. This allows...

OPENSUSE-SU-2026:10227-1 python311-py7zr-1.1.0-1.1 on GA media

These are all security issues fixed in the python311-py7zr-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed...