PT-2026-41652

Name of the Vulnerable Software and Affected Versions OpenColorIO versions prior to 2.5.2 Description In the FileFormatSpi3D.cpp:163 file, the sscanf function is used with the %s format specifier to write data into 64-byte stack buffers while parsing LUT Look-Up Table data lines. Because the inpu...

OPENSUSE-SU-2026:10801-1 OpenColorIO-devel-2.5.2-1.1 on GA media

These are all security issues fixed in the OpenColorIO-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10802-1 libtree-sitter0_26-0.26.8-3.1 on GA media

These are all security issues fixed in the libtree-sitter026-0.26.8-3.1 package on the GA media of openSUSE Tumbleweed...

expat-2.8.1-1.1 on GA media (moderate)

expat-2.8.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10787-1 Rating: moderate Cross-References: CVE-2026-41080 CVE-2026-45186 CVSS scores: CVE-2026-41080 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2026-41080 SUSE : 2...

apache-commons-configuration2-2.15.0-1.1 on GA media (moderate)

apache-commons-configuration2-2.15.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10784-1 Rating: moderate Cross-References: CVE-2025-48924 CVE-2026-45205 CVSS scores: CVE-2025-48924 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-48924 SUSE : 5.7...

java-21-openj9-21.0.11.0-2.1 on GA media (moderate)

java-21-openj9-21.0.11.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10791-1 Rating: moderate Cross-References: CVE-2026-1188 CVSS scores: CVE-2026-1188 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

java-1_8_0-openj9-1.8.0.492-2.1 on GA media (moderate)

java-180-openj9-1.8.0.492-2.1 on GA media Announcement ID: openSUSE-SU-2026:10790-1 Rating: moderate Cross-References: CVE-2026-1188 CVSS scores: CVE-2026-1188 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

java-11-openj9-11.0.31.0-2.1 on GA media (moderate)

java-11-openj9-11.0.31.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10788-1 Rating: moderate Cross-References: CVE-2026-1188 CVSS scores: CVE-2026-1188 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

chromedriver-148.0.7778.167-2.1 on GA media (moderate)

chromedriver-148.0.7778.167-2.1 on GA media Announcement ID: openSUSE-SU-2026:10786-1 Rating: moderate Cross-References: CVE-2026-8509 CVE-2026-8510 CVE-2026-8511 CVE-2026-8512 CVE-2026-8513 CVE-2026-8514 CVE-2026-8515 CVE-2026-8516 CVE-2026-8517 CVE-2026-8518 CVE-2026-8519 CVE-2026-8520...

java-17-openj9-17.0.19.0-2.1 on GA media (moderate)

java-17-openj9-17.0.19.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10789-1 Rating: moderate Cross-References: CVE-2026-1188 CVSS scores: CVE-2026-1188 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

java-25-openj9-25.0.3.0-2.1 on GA media (moderate)

java-25-openj9-25.0.3.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10792-1 Rating: moderate Cross-References: CVE-2026-1188 CVSS scores: CVE-2026-1188 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

OPENSUSE-SU-2026:10790-1 java-1_8_0-openj9-1.8.0.492-2.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.492-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:20720-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20720-1 advisory. Changes in trivy: - update go-git to 5.18.0 bsc1264873, CVE-2026-41506 Tenable has extracted the preceding description block directly from the SUSE...

OPENSUSE-SU-2026:10788-1 java-11-openj9-11.0.31.0-2.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.31.0-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : raylib (openSUSE-SU-2026:20717-1)

"The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20717-1 advisory. Changes in raylib: - security update: CVE-2025-15533: Fix heap-based buffer overflow via GenImageFontAtlas function manipulation bsc1256900...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs115 (SUSE-SU-2026:1870-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1870-1 advisory. This update for mozjs115 fixes the following issues - CVE-2026-32776: libexpat: NULL pointer...

OPENSUSE-SU-2026:10796-1 nginx-1.31.0-1.1 on GA media

These are all security issues fixed in the nginx-1.31.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10793-1 kernel-devel-7.0.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10786-1 chromedriver-148.0.7778.167-2.1 on GA media

These are all security issues fixed in the chromedriver-148.0.7778.167-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10791-1 java-21-openj9-21.0.11.0-2.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.11.0-2.1 package on the GA media of openSUSE Tumbleweed...