Security update for gimp (important)

openSUSE security update: security update for gimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22123-1 Rating: important References: bsc1277594 bsc1277618 bsc1277622 bsc1284473 bsc1284474 bsc1284475 Cross-References: CVE-2026-106061...

Security update for psqlODBC (moderate)

openSUSE security update: security update for psqlodbc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22122-1 Rating: moderate References: bsc1285073 Cross-References: CVE-2026-109448 CVSS scores: CVE-2026-109448 SUSE : 5.9...

Security update for nvidia-open-driver-G07-signed (important)

openSUSE security update: security update for nvidia-open-driver-g07-signed ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22106-1 Rating: important References: bsc1270255 bsc1271601 bsc1278022 bsc1280057 bsc1283265 Cross-References: CVE-2026-47489...

Security update for openssl-3 (important)

openSUSE security update: security update for openssl-3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22102-1 Rating: important References: bsc1280587 bsc1280589 bsc1280590 bsc1280591 bsc1280592 bsc1280594 bsc1280595 bsc1280596 bsc1280597 bsc12805...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22091-1 Rating: important References: bsc1253340 bsc1258335 bsc1260474 bsc1261564 bsc1261816 bsc1264330 bsc1264607 bsc1264747 bsc1266410...

Security update for xwayland (important)

openSUSE security update: security update for xwayland ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22085-1 Rating: important References: bsc1281213 bsc1281218 bsc1281220 bsc1281225 bsc1281227 bsc1281233 bsc1281236 bsc1281238 bsc1281240 bsc128124...

Security update for libpng16 (moderate)

openSUSE security update: security update for libpng16 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22084-1 Rating: moderate References: bsc1283183 Cross-References: CVE-2026-46675 CVSS scores: CVE-2026-46675 SUSE : 5.9...

Security update for google-osconfig-agent (important)

openSUSE security update: security update for google-osconfig-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22078-1 Rating: important References: bsc1283672 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

Security update for python-PyJWT (important)

openSUSE security update: security update for python-pyjwt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22074-1 Rating: important References: bsc1283060 bsc1283061 bsc1283064 bsc1283065 bsc1283066 bsc1283067 bsc1283068 bsc1283071 bsc1283072...

Security update for python-hpack (moderate)

openSUSE security update: security update for python-hpack ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22070-1 Rating: moderate References: bsc1283035 Cross-References: CVE-2026-59980 CVSS scores: CVE-2026-59980 SUSE : 5.3...

Security update for pacemaker (important)

openSUSE security update: security update for pacemaker ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22069-1 Rating: important References: bsc1180966 bsc1249217 bsc1255371 bsc1259345 bsc1265183 bsc1265201 bsc1268381 bsc1270354 bsc1271652 bsc12724...

Roundcube Webmail 1.6.10 PHP Object Deserialization

Roundcube Webmail version 1.6.10 contains a post-authentication PHP object deserialization vulnerability that can allow arbitrary command execution. Included are a CTF environment and proof of concept exploit. https://packetstorm.news/download/236152...

Apache SystemDS 3.5.0-SNAPSHOT Unauthenticated Java Deserialization

Apache SystemDS versions 3.4.0 and 3.5.0-SNAPSHOT federated worker contains an unauthenticated Java deserialization vulnerability that may allow remote code execution when a suitable gadget class is present. !/usr/bin/env bash Apache SystemDS 3.4.0 Unauthenticated Java Deserialization Vendor: The...

PT-2026-117028

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: don't drain cmd sync backlog on unregister hci unregister dev disables cmd work and cmd timer, then calls hci cmd sync clear, whose cancel work sync waits for hci cmd sync work to return. That worker dequeues...

Magento Open Source 2.4.9-2026-sep Block Directive Injection

Magento Open Source version 2.4.9-2026-sep and earlier contains a template directive-injection vulnerability. This lab provides proof of concept A/B validation for an unauthenticated block-directive primitive and bounded file side effect, with a separately labeled synthetic fixed-command gadget...

Security update for go1.27 (important)

openSUSE security update: security update for go1.27 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22093-1 Rating: important References: bsc1272545 bsc1284766 bsc1284767 bsc1284768 bsc1284769 bsc1284770 bsc1284771 bsc1284772 bsc1284773 bsc1284774...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22095-1 Rating: important References: bsc1255111 bsc1284766 bsc1284767 bsc1284768 bsc1284769 bsc1284771 bsc1284773 bsc1284774 bsc1284775 bsc1284776...

Security update for iperf (important)

openSUSE security update: security update for iperf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22090-1 Rating: important References: bsc1283528 bsc1283786 bsc1283787 bsc1284404 bsc1284405 Cross-References: CVE-2026-101276 CVE-2026-101283...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22124-1 Rating: important References: bsc1285733 Cross-References: CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916 CVE-2026-110917...

Security update for libheif (moderate)

openSUSE security update: security update for libheif ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22052-1 Rating: moderate References: bsc1281829 bsc1281948 bsc1281949 bsc1281950 bsc1281951 bsc1281952 bsc1281953 bsc1281954 Cross-References:...