OPENSUSE-SU-2026:11231-1 flannel-0.28.7-1.1 on GA media

These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

fluidsynth-2.5.6-1.1 on GA media (moderate)

fluidsynth-2.5.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11211-1 Rating: moderate Cross-References: CVE-2026-58264 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:11237-1 python313-maturin-1.14.1-1.1 on GA media

These are all security issues fixed in the python313-maturin-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21249-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21249-1 advisory. This update for trivy fixes the following issues Update to version 0.72.0. - CVE-2026-54448: tar unpacker reads scanned Helm chart archives .tgz...

openSUSE 16: krb5 / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (openSUSE-SU-2026:21238-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21238-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. Tenable...

openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:21245-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21245-1 advisory. This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in...

OPENSUSE-SU-2026:11228-1 ImageMagick-7.1.2.27-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11241-1 rclone-1.74.4-1.1 on GA media

These are all security issues fixed in the rclone-1.74.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media

These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57243

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description When using the serve restic --private-repos command, the software enforces authorization based on the routed user path segment but constructs the backend object key using the raw, uncleaned URL path...

PT-2026-57234

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description When using the -l/--links flag, the software serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target. This allows an attacker-controlle...

PT-2026-57242

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description The archive extract function allows the creation or overwriting of sibling objects within the same bucket or path scope. This occurs when extracting a specially crafted archive containing parent path...

OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media

These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : buildah (openSUSE-SU-2026:21241-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21241-1 advisory. This update for buildah fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels...

openSUSE 16 Security Update : python-msgpack (openSUSE-SU-2026:21239-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21239-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an...

go1.25-1.25.12-1.1 on GA media (moderate)

go1.25-1.25.12-1.1 on GA media Announcement ID: openSUSE-SU-2026:11212-1 Rating: moderate Cross-References: CVE-2026-39822 CVE-2026-42505 CVSS scores: CVE-2026-39822 SUSE : 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2026-42505 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

sccache-0.16.0~0-2.1 on GA media (moderate)

sccache-0.16.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11206-1 Rating: moderate Cross-References: CVE-2026-41676 CVSS scores: CVE-2026-41676 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-41676 SUSE : 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N...

openSUSE 16 Security Update : podman (openSUSE-SU-2026:21244-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21244-1 advisory. This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE inp...

cargo-c-0.10.23-1.1 on GA media (moderate)

cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...

PT-2026-56855

Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls23 and libeverest packages. Recommendations Update libmbedtls23 to version 4.2.0-1.1. Update...