openSUSE 16 Security Update : perl-Mojolicious (openSUSE-SU-2026:21496-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21496-1 advisory. Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now mask...

openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21475-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21475-1 advisory. - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with...

PT-2026-67254

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.1 Description A crafted HEIF sequence processed by the heif context read from memory function can result in a context with no registered sequence tracks. This leads to a crash when the heif context get trackctx, ...

PackageKit-1.3.6-1.1 on GA media (moderate)

PackageKit-1.3.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11406-1 Rating: moderate Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2026-10294 SUSE : 2.1...

openSUSE 16 Security Update : ignition (openSUSE-SU-2026:21482-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21482-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21480-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21480-1 advisory. - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation bsc1272488. - CVE-2026-39821:...

OPENSUSE-SU-2026:11416-1 gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11417-1 libntpc1-1.2.5-1.1 on GA media

These are all security issues fixed in the libntpc1-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11430-1 librrd8-1.10.3-1.1 on GA media

These are all security issues fixed in the librrd8-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11420-1 python313-asteval-1.0.9-1.1 on GA media

These are all security issues fixed in the python313-asteval-1.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11429-1 python315-3.15.0~b4-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b4-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : yq (openSUSE-SU-2026:21500-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21500-1 advisory. Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good bsc1267199. - update to v4.53.3 Add...

openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21499-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21499-1 advisory. Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip...

openSUSE 16 Security Update : google-guest-agent (openSUSE-SU-2026:21476-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21476-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...

OPENSUSE-SU-2026:11422-1 python313-huggingface-hub-1.26.0-1.1 on GA media

These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11431-1 ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21492-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21492-1 advisory. Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels Tenable has extracted the preceding description block...

warewulf4-4.7.0-4.1 on GA media (moderate)

warewulf4-4.7.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11404-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0271-1 Rating: important References: 1272936 Cross-References: CVE-2026-17650 CVE-2026-17651 CVE-2026-17652 CVE-2026-17653 CVE-2026-17654 CVE-2026-17655 CVE-2026-17656 CVE-2026-17657 CVE-2026-17658...