CVE-2026-40244 OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, internaldwacompressor.h:1722 performs curc-width curc-height in int32...

CLEANSTART-2026-UW12529 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-34213

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.21 Description A server-side request forgery SSRF allows an attacker to extract sensitive environment variables from an instance via a timing side-channel attack against the notebook rendering...

OPENSUSE-SU-2026:10597-1 python311-python-multipart-0.0.26-1.1 on GA media

These are all security issues fixed in the python311-python-multipart-0.0.26-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for glibc (important)

openSUSE security update: security update for glibc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20501-1 Rating: important References: bsc1258319 bsc1260078 bsc1260082 Cross-References: CVE-2026-4437 CVE-2026-4438 CVSS scores: CVE-2026-4437 SUSE ...

OPENSUSE-SU-2026:10588-1 capnproto-1.4.0-2.1 on GA media

These are all security issues fixed in the capnproto-1.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10593-1 openCryptoki-3.26.0-6.1 on GA media

These are all security issues fixed in the openCryptoki-3.26.0-6.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-37376

Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1 Description An issue was identified in the gnutls package that has been addressed in a security update. Recommendations Update to version 3.8.13-1.1...

kernel security update

4.18.0-553.120.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

osbuild-composer security update

101.4-5.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl JIRA: OLDIS-38123 - Increase default /boot size to 1GB Orabug: 36827079 - support for building OL8/9 images on Oracle Linu...

Security update for vim (important)

openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20540-1 Rating: important References: bsc1259985 bsc1261191 bsc1261271 Cross-References: CVE-2026-33412 CVE-2026-34714 CVE-2026-34982 CVSS scores:...

OPENSUSE-SU-2026:10587-1 calibre-9.7.0-1.1 on GA media

These are all security issues fixed in the calibre-9.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-34870

Name of the Vulnerable Software and Affected Versions libXpm versions prior to 3.5.18-2.1 Description An issue exists in the image parsing functionality of libXpm. Recommendations Update to version 3.5.18-2.1...

PT-2026-37380

Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1 Description No detailed information was provided regarding the nature of the security issues fixed in this package. Recommendations Update to version 3.8.13-1.1...

Security update for libraw (important)

openSUSE security update: security update for libraw ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20574-1 Rating: important References: bsc1261499 bsc1261671 bsc1261672 bsc1261673 bsc1261674 bsc1261675 bsc1261676 Cross-References: CVE-2026-20884...

Security update for python313 (important)

openSUSE security update: security update for python313 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20517-1 Rating: important References: bsc1257181 bsc1259240 bsc1259611 bsc1259734 bsc1259735 bsc1259989 bsc1260026 Cross-References: CVE-2025-134...

Security update for dovecot24 (important)

openSUSE security update: security update for dovecot24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20554-1 Rating: important References: bsc1260893 bsc1260894 bsc1260895 bsc1260896 bsc1260897 bsc1260898 bsc1260899 bsc1260900 bsc1260901 bsc12609...

Debian dsa-6205 : chromium - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6205 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6205-1 [email protected]...

OPENSUSE-SU-2026:10590-1 flatpak-builder-1.4.8-1.1 on GA media

These are all security issues fixed in the flatpak-builder-1.4.8-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20572-1 Rating: important References: bsc1191256 bsc1191270 bsc1194778 bsc1207184 bsc1217845 bsc1222768 bsc1243208 bsc1252073 bsc1253129...