libblkid-devel-2.42.2-1.1 on GA media (moderate)

libblkid-devel-2.42.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11408-1 Rating: moderate Cross-References: CVE-2026-13595 CVE-2026-53612 CVE-2026-53613 CVE-2026-53614 CVSS scores: CVE-2026-13595 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H CVE-2026-13595 SUSE : 6.9...

PT-2026-67348

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11414-1 GraphicsMagick-1.3.48-1.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.48-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : yq (openSUSE-SU-2026:21500-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21500-1 advisory. Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good bsc1267199. - update to v4.53.3 Add...

OPENSUSE-SU-2026:11419-1 python313-GitPython-3.1.56-1.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 : nodejs:22 (ELSA-2026-47059)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47059 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-193842 RHEL-193874 RHEL-208661 - Update to...

OPENSUSE-SU-2026:11418-1 php8-8.5.9-1.1 on GA media

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11422-1 python313-huggingface-hub-1.26.0-1.1 on GA media

These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / tomcat-embed / etc (openSUSE-SU-2026:21486-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21486-1 advisory. Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass...

PT-2026-67253

Name of the Vulnerable Software and Affected Versions libheif versions 1.19.0 through 1.23.0 Description A flaw exists in the way uncompressed HEIF images using generic zlib unci full-item compression are handled. When an application decodes an advertised tile using the heif image handle decode...

PT-2026-67252

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.1 Description A flaw exists in the HEIF and AVIF file format decoder and encoder where a specially crafted file containing a clean aperture box can cause an image dimension to be reduced to zero. This occurs when...

PT-2026-67222

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.9 Description An attacker can trigger a Denial of Service DoS by supplying specific expressions to the asteval.Interpreter.eval function. The issue occurs because the FROM PY list in asteval/astutils.py exposes...

OPENSUSE-SU-2026:11415-1 gio-branding-upstream-2.88.3-1.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.88.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11428-1 python312-3.12.13-8.1 on GA media

These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11427-1 python311-3.11.15-8.1 on GA media

These are all security issues fixed in the python311-3.11.15-8.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-45330

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin controllers load pending Authorization records by raw identifier without confirming currentorganization ownership, allowing an...

CVE-2026-45377 Decidim: Private exports can be downloaded through reusable links

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without...

Security Bulletin: IBM Storage Protect Server is affected by multiple vulnerability in the netty-codec-http library that could allow an attacker to exploit integer overflow conditions when processing chunked HTTP requests(CVE-2026-42581, CVE-2026-42584).

Summary IBM Storage Protect Server uses the netty-codec-http library in certain components. Netty is vulnerable to multiple vulnerability that could allow an attacker to exploit integer overflow conditions when processing chunked HTTP requests. This may lead to inconsistent request parsing and...

SUSE-SU-2026:3440-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.120: Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...