OPENSUSE-SU-2026:10908-1 cloudflared-2026.5.2-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10911-1 libsoup-3_0-0-3.6.6-5.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10912-1 restic-0.18.1-3.1 on GA media

These are all security issues fixed in the restic-0.18.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10907-1 cloud-hypervisor-52.0-1.1 on GA media

These are all security issues fixed in the cloud-hypervisor-52.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45156

Name of the Vulnerable Software and Affected Versions python311-dulwich versions prior to 1.2.5-1.1 Description Security issues were identified in the python311-dulwich package. Recommendations Update to version 1.2.5-1.1...

OPENSUSE-SU-2026:10887-1 apptainer-1.4.5-6.1 on GA media

These are all security issues fixed in the apptainer-1.4.5-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10899-1 mcphost-0.34.0-7.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10898-1 matrix-synapse-1.153.0-2.1 on GA media

These are all security issues fixed in the matrix-synapse-1.153.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45144

Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.10 Description A relative path traversal issue exists when processing repository metadata. Remote attackers can exploit this by supplying malicious repositories to overwrite files on the system, which may result...

OPENSUSE-SU-2026:10889-1 distribution-registry-3.1.1-3.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10894-1 kpt-cli-1.0.0~beta.64-1.1 on GA media

These are all security issues fixed in the kpt-cli-1.0.0beta.64-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10903-1 libunbound8-1.25.1-1.1 on GA media

These are all security issues fixed in the libunbound8-1.25.1-1.1 package on the GA media of openSUSE Tumbleweed...

azure-storage-azcopy-10.32.4-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10873-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

helm-4.2.0-3.1 on GA media (moderate)

helm-4.2.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:10876-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10902-1 golang-github-teddysun-v2ray-plugin-5.49.0-1.1 on GA media

These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.49.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10890-1 ffmpeg-8-8.1.1-3.1 on GA media

These are all security issues fixed in the ffmpeg-8-8.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-46841

Vulnerability in Oracle REST Data Services component: General. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...

kernel: md/bitmap: fix GPF in write_page caused by resize race

A flaw was found in the Linux kernel's md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the bitmapdaemonwork and bitmapresize functions execute concurrently, they can access memory pages that have already been freed...

CVE-2026-46241

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts in case controller registration fails to avoid a potential use-after-free and resource leak. This issue was flagged by Sashiko...

CVE-2026-46841: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in Oracle REST Data Services component: General. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability c...