openSUSE 16 Security Update : perl-IO-Compress (openSUSE-SU-2026:21177-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21177-1 advisory. Changes in perl-IO-Compress: - updated to 2.220.0 2.220 see /usr/share/doc/packages/perl-IO-Compress/Changes 2.220 16 May 2026 remove use of eva...

PT-2026-55432

These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55428

These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-pdm (openSUSE-SU-2026:21161-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21161-1 advisory. Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files bsc1268384 - CVE-2026-47763: Do not write to paths...

openSUSE 16 Security Update : libnfs (openSUSE-SU-2026:21055-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21055-1 advisory. This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server bsc1268135. Tenable has...

openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21171-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21171-1 advisory. Changes in gimp: - CVE-2026-40917: plug-ins: Clean up ICNS file loading bsc1262199. Tenable has extracted the preceding description block directly from...

PT-2026-55433

These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11166-1 c3p0-0.14.1-1.1 on GA media

These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11164-1 MozillaThunderbird-140.12.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55483

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...

PT-2026-55486

Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG fails to pin the search path in the fillDefaultParameters function within pkg/management/postgres/pool/profiles.go when opening superuser...

PT-2026-55431

These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55430

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: MozillaThunderbird / MozillaThunderbird-openpgp-librnp / etc (openSUSE-SU-2026:21168-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21168-1 advisory. Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 bsc1268071 CVE-2026-12289 bmo2023443 Privilege escalation in the...

PT-2026-55429

These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55485

Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG embeds cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by the SetUserPassword and appendPasswordOption function...

PT-2026-55434

These are all security issues fixed in the python311-python-socketio-5.16.3-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-tornado6 (openSUSE-SU-2026:21067-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21067-1 advisory. This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in...

OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-66343

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An issue exists in the freerdp dsp decode opus function within libfreerdp/codec/dsp.c where Stream EnsureRemainingCapacity is called on context-common.buffer despite opus decode writing decoded PCM...