OPENSUSE-SU-2026:12017-1 python313-marshmallow-4.3.0-1.2 on GA media

These are all security issues fixed in the python313-marshmallow-4.3.0-1.2 package on the GA media of openSUSE Tumbleweed...

PT-2026-105758

These are all security issues fixed in the qemu-11.1.1-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105698

These are all security issues fixed in the python313-CairoSVG-2.9.0-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11989-1 python313-CairoSVG-2.9.0-1.3 on GA media

These are all security issues fixed in the python313-CairoSVG-2.9.0-1.3 package on the GA media of openSUSE Tumbleweed...

PT-2026-105756

These are all security issues fixed in the python313-waitress-3.0.2-1.7 package on the GA media of openSUSE Tumbleweed...

PT-2026-105697

These are all security issues fixed in the python313-Brotli-1.2.0-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11988-1 python313-Brotli-1.2.0-1.6 on GA media

These are all security issues fixed in the python313-Brotli-1.2.0-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12025-1 python313-paramiko-5.0.0-1.2 on GA media

These are all security issues fixed in the python313-paramiko-5.0.0-1.2 package on the GA media of openSUSE Tumbleweed...

PT-2026-105734

These are all security issues fixed in the python313-paramiko-5.0.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11996-1 python313-PyYAML-6.0.3-1.6 on GA media

These are all security issues fixed in the python313-PyYAML-6.0.3-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12027-1 python313-py-1.11.0-9.5 on GA media

These are all security issues fixed in the python313-py-1.11.0-9.5 package on the GA media of openSUSE Tumbleweed...

openai-codex-0.158.0-1.1 on GA media (moderate)

openai-codex-0.158.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11923-1 Rating: moderate Cross-References: CVE-2026-91986 CVE-2026-93657 CVSS scores: CVE-2026-91986 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-91986 SUSE : 5.3...

libslirp-devel-4.9.5+1-1.1 on GA media (moderate)

libslirp-devel-4.9.5+1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11922-1 Rating: moderate Cross-References: CVE-2026-95507 CVSS scores: CVE-2026-95507 SUSE : 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2026-95507 SUSE : 5.1...

rpcbind-1.2.9-3.1 on GA media (moderate)

rpcbind-1.2.9-3.1 on GA media Announcement ID: openSUSE-SU-2026:11929-1 Rating: moderate Cross-References: CVE-2026-94640 CVSS scores: CVE-2026-94640 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-94640 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

python313-litellm-1.103.0-1.1 on GA media (moderate)

python313-litellm-1.103.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11927-1 Rating: moderate Cross-References: CVE-2026-89032 CVE-2026-93355 CVSS scores: CVE-2026-93355 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves 2...

PT-2026-105694

These are all security issues fixed in the logback-1.6.5-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...