python311-3.11.15-6.1 on GA media (moderate)

python311-3.11.15-6.1 on GA media Announcement ID: openSUSE-SU-2026:11068-1 Rating: moderate Cross-References: CVE-2026-1502 CVE-2026-3446 CVE-2026-4786 CVE-2026-6019 CVE-2026-6100 CVSS scores: CVE-2026-1502 SUSE : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVE-2026-1502 SUSE : 5.7...

OPENSUSE-SU-2026:11068-1 python311-3.11.15-6.1 on GA media

These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11064-1 ansible-core-2.20-2.20.7-1.1 on GA media

These are all security issues fixed in the ansible-core-2.20-2.20.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11062-1 ansible-core-2.18-2.18.18-1.1 on GA media

These are all security issues fixed in the ansible-core-2.18-2.18.18-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11070-1 warewulf4-4.7.0-2.1 on GA media

These are all security issues fixed in the warewulf4-4.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11063-1 ansible-core-2.19-2.19.11-1.1 on GA media

These are all security issues fixed in the ansible-core-2.19-2.19.11-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-52057

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.0.0 through 26.3.0 Description An issue in proxy tunnel error handling may lead to the exposure of proxy credentials within ERR PROXY TUNNEL error messages. This occurs when...

PT-2026-51166

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description An integer overflow exists in the freerdp image copy from icon data function, which allows a bounds check to be bypassed. Recommendations Update to version 3.27.1-1.1...

PT-2026-51165

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description A heap-buffer-overflow write occurs during the reassembly of TS Gateway RPC RESPONSE messages. This issue is caused by a capacity mismatch in the alloc hint variable. Recommendations Update to...

OPENSUSE-SU-2026:11066-1 nginx-1.31.2-1.1 on GA media

These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11067-1 python311-joserfc-1.7.1-1.1 on GA media

These are all security issues fixed in the python311-joserfc-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11055-1 firefox-esr-140.12.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11051-1 weblate-5.17.1-2.1 on GA media

These are all security issues fixed in the weblate-5.17.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11043-1 python313-distributed-2026.6.0-1.1 on GA media

These are all security issues fixed in the python313-distributed-2026.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11041-1 python-WebOb-doc-1.8.10-1.1 on GA media

These are all security issues fixed in the python-WebOb-doc-1.8.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11036-1 python311-zeroconf-0.149.16-1.1 on GA media

These are all security issues fixed in the python311-zeroconf-0.149.16-1.1 package on the GA media of openSUSE Tumbleweed...

librav1e0_8-0.8.1-2.1 on GA media (moderate)

librav1e08-0.8.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11028-1 Rating: moderate Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-58160 SUSE : 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:...

kitty-0.47.3-1.1 on GA media (moderate)

kitty-0.47.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11021-1 Rating: moderate Cross-References: CVE-2026-54057 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the kitty-0.47.3-1.1...

logback-1.5.34-2.1 on GA media (moderate)

logback-1.5.34-2.1 on GA media Announcement ID: openSUSE-SU-2026:11016-1 Rating: moderate Cross-References: CVE-2026-9828 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the logback-1.5.34-2.1...

PT-2026-49118

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest and removes only the Host header. It fails to clear the Authorization header, auth username, auth passwor...