curl-8.22.0-1.1 on GA media (moderate)

curl-8.22.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11696-1 Rating: moderate Cross-References: CVE-2026-13608 CVE-2026-18924 CVE-2026-19931 CVE-2026-80229 CVE-2026-80230 CVE-2026-80255 CVE-2026-82209 CVSS scores: CVE-2026-13608 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...

PT-2026-88247

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

OPENSUSE-SU-2026:11718-1 helm-4.2.4-3.1 on GA media

These are all security issues fixed in the helm-4.2.4-3.1 package on the GA media of openSUSE Tumbleweed...

skopeo security update

2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add test file installation to fix tier0 tests 2:1.22.2-3 - Rebuild for CVE-2026-27145...

OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media

These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89114

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description When WITH UNCOMPRESSED CODEC is enabled, the heif context add image tile function accepts a tile with component-plane dimensions that differ from the prototype image geometry. The ImageItem...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

git-lfs security update

3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang...

CVE-2026-62653: Out-of-bounds Write

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

CVE-2026-73318: Incorrect Authorization

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

OPENSUSE-SU-2026:11723-1 python313-comfyui-frontend-package-1.52.7-1.1 on GA media

These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11717-1 git-bug-0.10.1-7.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11727-1 rclone-1.75.1-1.1 on GA media

These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11721-1 libmariadb-devel-3.4.9-2.1 on GA media

These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:64770 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046

News, Security Update your browser: Security fix for Chrome zero-day CVE‑2026‑85046 Share September 8th, 2026 Hi everyone! The latest patches to Opera’s browsers address several recent vulnerabilities, including a zero-day exploit CVE‑2026‑85046. We recommend updating your browsers to the latest...

How to Disable the Automatic Installation of Security Updates When Adding a Veeam Infrastructure Appliance to Veeam Backup & Replication

Purpose By default, when a new Veeam Infrastructure Appliance is added to the Veeam Backup & Replication infrastructure, all available security updates are installed on that appliance automatically by the Veeam Updater running on it. The installation of updates can take a significant amount of...

OPENSUSE-SU-2026:11714-1 chromedriver-152.0.7977.82-1.1 on GA media

These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed...

thunderbird security update

140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...

ALSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...