openSUSE 16 Security Update : distribution (openSUSE-SU-2026:21898-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21898-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21886-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21886-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case o...

openSUSE 16 Security Update : google-osconfig-agent (openSUSE-SU-2026:21882-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21882-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...

openSUSE 16: lastlog2 / libblkid-devel / libblkid-devel-static / libblkid1 / etc (openSUSE-SU-2026:21905-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21905-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when settin...

openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21925-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21925-1 advisory. Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Tenable has extracted the...

openSUSE 16 Security Update : libX11 (openSUSE-SU-2026:21908-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21908-1 advisory. This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. Tenable has extracted the...

openSUSE 16: erlang-rabbitmq-client / rabbitmq-server / etc (openSUSE-SU-2026:21903-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21903-1 advisory. - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts...

openSUSE 16: exiv2 / exiv2-lang / libexiv2-28 / libexiv2-28-x86-64-v3 / etc (openSUSE-SU-2026:21904-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21904-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading...

openSUSE 16 Security Update : libXrender (openSUSE-SU-2026:21909-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21909-1 advisory. This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911. Tenable has...

openSUSE 16: httpcomponents-client / httpcomponents-client-cache / etc (openSUSE-SU-2026:21894-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21894-1 advisory. This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager...

openSUSE 16 Security Update : jsoup, re2j (openSUSE-SU-2026:21900-1)

"The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21900-1 advisory. This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element,...

Security update for gitoxide (moderate)

openSUSE security update: security update for gitoxide ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21955-1 Rating: moderate References: bsc1281749 Cross-References: CVE-2026-91986 CVSS scores: CVE-2026-91986 SUSE : 5.4...

Security update for kbd (important)

openSUSE security update: security update for kbd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21939-1 Rating: important References: bsc1275441 Cross-References: CVE-2026-72693 CVSS scores: CVE-2026-72693 SUSE : 7.8...

Security update for haveged (moderate)

openSUSE security update: security update for haveged ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21958-1 Rating: moderate References: bsc1264086 Cross-References: CVE-2026-41054 CVSS scores: CVE-2026-41054 SUSE : 7.8...

Security update for perl-Mojolicious (important)

openSUSE security update: security update for perl-mojolicious ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21956-1 Rating: important References: bsc1281637 bsc1281638 Cross-References: CVE-2026-68914 CVE-2026-77568 CVSS scores: CVE-2026-68914 SU...

Security update for osmo-iuh (important)

openSUSE security update: security update for osmo-iuh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21954-1 Rating: important References: bsc1281607 Cross-References: CVE-2026-75894 Affected Products: openSUSE Leap 16.0...

openai-codex-0.155.1-1.1 on GA media (moderate)

openai-codex-0.155.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11849-1 Rating: moderate Cross-References: CVE-2026-63127 CVE-2026-63128 CVE-2026-64684 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security...

forgejo-longterm-15.0.8-1.1 on GA media (moderate)

forgejo-longterm-15.0.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11846-1 Rating: moderate Cross-References: CVE-2026-27660 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

openSUSE 16 Security Update : libsoup (openSUSE-SU-2026:21901-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21901-1 advisory. - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overfl...

google-osconfig-agent-20260918.01-1.1 on GA media (moderate)

google-osconfig-agent-20260918.01-1.1 on GA media Announcement ID: openSUSE-SU-2026:11847-1 Rating: moderate Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one...