OPENSUSE-SU-2026:11632-1 owasp-modsecurity-crs-4.29.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11627-1 bzip2-1.0.8-6.1 on GA media

These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11636-1 wicked-0.6.80-2.1 on GA media

These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11633-1 php-composer2-2.10.3-1.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11628-1 chromedriver-152.0.7977.64-1.1 on GA media

These are all security issues fixed in the chromedriver-152.0.7977.64-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11635-1 python313-uv-0.12.7-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11630-1 istioctl-1.30.4-1.1 on GA media

These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11634-1 jupyter-jupyterlab-4.5.10-1.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-4.5.10-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83483

Name of the Vulnerable Software and Affected Versions Composer versions prior to 2.10.3 Composer versions prior to 2.2.30 Description Two issues allow directory escape and arbitrary command execution. Recommendations Update to version 2.10.3. Update to version 2.2.30...

PT-2026-83492

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description URL normalization fails to recognize dot . and dot-dot .. path segments when they contain semicolon...

PT-2026-83494

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...

PT-2026-83491

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated client can trigger an out-of-memory condition by exploiting how the proxy handles HTTP/...

PT-2026-83493

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates safe regex values using RE2's UTF-8...

PT-2026-83489

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated HTTP/2 client can exploit the way the proxy forwards data for configured non-WebSocket...

PT-2026-83490

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy fails to properly handle scoped IPv6 addresses when using Utility::copyInternetAddressAndPort and QU...

PT-2026-83488

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The ext authz filter incorrectly assumes that a request always contains a :path pseudoheader when applying...

PT-2026-83486

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When the optional oghttp2 upstream HTTP/2 codec is enabled, the software accepts a response trailer HEADER...

PT-2026-83485

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When Capsule Protocol is enabled, the HttpDatagramHandler caches the current RequestDecoder. During stream...

PT-2026-83484

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy matches raw request paths, whereas servlet backends like Apache Tomcat strip semicolon matrix...

PT-2026-83487

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The /stats?format=html admin endpoint uses StatsHtmlRender, which fails to HTML-encode statistic names. A...