PT-2026-67080

These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11422-1 python313-huggingface-hub-1.26.0-1.1 on GA media

These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-67222

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.9 Description An attacker can trigger a Denial of Service DoS by supplying specific expressions to the asteval.Interpreter.eval function. The issue occurs because the FROM PY list in asteval/astutils.py exposes...

PT-2026-67252

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.1 Description A flaw exists in the HEIF and AVIF file format decoder and encoder where a specially crafted file containing a clean aperture box can cause an image dimension to be reduced to zero. This occurs when...

OPENSUSE-SU-2026:11428-1 python312-3.12.13-8.1 on GA media

These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11416-1 gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21498-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21498-1 advisory. Changes in chromium: - Chromium 150.0.7871.186 boo1272460: CVE-2026-16807: Out of bounds write in Codecs CVE-2026-16806: Use after free in WebMC...

openSUSE 16 Security Update : vexctl (openSUSE-SU-2026:21481-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21481-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...

openSUSE 16: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / tomcat-embed / etc (openSUSE-SU-2026:21486-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21486-1 advisory. Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass...

openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21485-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21485-1 advisory. Update to version 8.0.10. - CVE-2026-56684: RCE via CLIENT KILL due to use-after-free in TLS connection handling bsc1272443. - CVE-2026-63639: R...

openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21475-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21475-1 advisory. - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with...

openSUSE 16 Security Update : perl-Mojolicious (openSUSE-SU-2026:21496-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21496-1 advisory. Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now mask...

PT-2026-67253

Name of the Vulnerable Software and Affected Versions libheif versions 1.19.0 through 1.23.0 Description A flaw exists in the way uncompressed HEIF images using generic zlib unci full-item compression are handled. When an application decodes an advertised tile using the heif image handle decode...

OPENSUSE-SU-2026:11423-1 python313-joserfc-1.7.4-2.1 on GA media

These are all security issues fixed in the python313-joserfc-1.7.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11424-1 python313-pydantic-2.13.4-2.1 on GA media

These are all security issues fixed in the python313-pydantic-2.13.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11425-1 python313-sentry-sdk-2.66.1-1.1 on GA media

These are all security issues fixed in the python313-sentry-sdk-2.66.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : perl-YAML-Syck (openSUSE-SU-2026:21497-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21497-1 advisory. Changes in perl-YAML-Syck: - updated to 1.470.0 1.47 Security - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load...

openSUSE 16: libpng16-16 / libpng16-16-x86-64-v3 / libpng16-compat-devel / etc (openSUSE-SU-2026:21479-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21479-1 advisory. Changes in libpng16: Version update to 1.6.58 jscPED-16190 see CHANGES for other upstream changes Tenable has extracted the preceding description block...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21480-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21480-1 advisory. - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation bsc1272488. - CVE-2026-39821:...

openSUSE 16: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (openSUSE-SU-2026:21490-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21490-1 advisory. This update for tomcat11 fixes the following issues - Update to Tomcat 11.0.24 - CVE-2026-59083: Incorrect URL decoding in RewriteValve may allo...