OPENSUSE-SU-2026:10649-1 sed-4.10-1.1 on GA media

These are all security issues fixed in the sed-4.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10648-1 python315-3.15.0~a8-3.1 on GA media

These are all security issues fixed in the python315-3.15.0a8-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10640-1 libpng12-0-1.2.59-5.1 on GA media

These are all security issues fixed in the libpng12-0-1.2.59-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10641-1 libixml11-1.18.5-1.1 on GA media

These are all security issues fixed in the libixml11-1.18.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10631-1 distribution-registry-3.1.0-1.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10643-1 php-composer2-2.9.7-1.1 on GA media

These are all security issues fixed in the php-composer2-2.9.7-1.1 package on the GA media of openSUSE Tumbleweed...

JLSEC-2026-234 Vulnerable OpenSSL included in cryptography wheels

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

Linux Distros Unpatched Vulnerability : CVE-2026-31592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Protect all of sevmemencregisterregion with kvm-lock Take and hold kvm-lock for before checking sevguest in sevmemencregisterregion, as sevguest isn't...

OPENSUSE-SU-2026:10627-1 chromedriver-148.0.7778.56-1.1 on GA media

These are all security issues fixed in the chromedriver-148.0.7778.56-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10628-1 pocketbase-0.37.3-1.1 on GA media

These are all security issues fixed in the pocketbase-0.37.3-1.1 package on the GA media of openSUSE Tumbleweed...

libminizip1-1.3.1-2.1 on GA media (moderate)

libminizip1-1.3.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10617-1 Rating: moderate Cross-References: CVE-2026-27171 CVSS scores: CVE-2026-27171 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-27171 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA...

OPENSUSE-SU-2026:10620-1 libmozjs-115-0-115.15.0-8.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.15.0-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10625-1 xdg-dbus-proxy-0.1.7-1.1 on GA media

These are all security issues fixed in the xdg-dbus-proxy-0.1.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10615-1 ovmf-202602-9.1 on GA media

These are all security issues fixed in the ovmf-202602-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10611-1 freerdp2-2.11.7-8.1 on GA media

These are all security issues fixed in the freerdp2-2.11.7-8.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-140.9.1-1.1 on GA media (moderate)

MozillaThunderbird-140.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10610-1 Rating: moderate Cross-References: CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 CVE-2026-6753 CVE-2026-6754 CVE-2026-6757 CVE-2026-6759 CVE-2026-6761...

OPENSUSE-SU-2026:10616-1 python311-Mako-1.3.11-1.1 on GA media

These are all security issues fixed in the python311-Mako-1.3.11-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-31599

A flaw was found in the Linux kernel's vidtv driver. This vulnerability stems from a failure to check for a null return value during memory allocation within the vidtvpsipmtstreaminit function. This oversight can lead to a null pointer dereference in vidtvchannelpmtmatchsections, causing a genera...

CVE-2026-31577

A flaw was found in the nilfs2 filesystem within the Linux kernel. A local user can trigger a null pointer dereference by calling the NILFSIOCTLCLEANSEGMENTS operation immediately after mounting the filesystem, but before any btree operations have occurred on the Data Allocation Table DAT inode...

AZL-83885 CVE-2026-31592 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect all of sevmemencregisterregion with kvm-lock Take and hold kvm-lock for before checking sevguest in sevmemencregisterregion, as sevguest isn't stable unless kvm-lock is held or KVM can guarantee KVMSEVINIT2 has...