OPENSUSE-SU-2026:11166-1 c3p0-0.14.1-1.1 on GA media

These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11165-1 alloy-1.17.1-1.1 on GA media

These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11171-1 python311-python-socketio-5.16.3-1.1 on GA media

These are all security issues fixed in the python311-python-socketio-5.16.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-66343

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An issue exists in the freerdp dsp decode opus function within libfreerdp/codec/dsp.c where Stream EnsureRemainingCapacity is called on context-common.buffer despite opus decode writing decoded PCM...

PT-2026-55427

These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11168-1 perl-CGI-Session-4.490.0-1.1 on GA media

These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media

These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-pydata-sphinx-theme (openSUSE-SU-2026:21173-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21173-1 advisory. Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball...

openSUSE 16 Security Update : tar (openSUSE-SU-2026:21070-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21070-1 advisory. This update for tar fixes the following issues - CVE-2026-5704: crafted archives can be used to to hide file injection bsc1261900. - Fix...

openSUSE 16 Security Update : python-biopython (openSUSE-SU-2026:21169-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21169-1 advisory. Changes in python-biopython: - CVE-2025-68463: Fixed a information disclosure caused by a XXE vulnerability boo1255465. Tenable has extracted the...

openSUSE 16: alsa / alsa-devel / alsa-topology-devel / libasound2 / etc (openSUSE-SU-2026:21075-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21075-1 advisory. This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt...

openSUSE 16 Security Update : python-py7zr (openSUSE-SU-2026:21159-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21159-1 advisory. Changes in python-py7zr: - CVE-2026-23879: crafted malicious symbolic link chains in an archive can lead to an arbitrary file write bsc1268669 -...

openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21171-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21171-1 advisory. Changes in gimp: - CVE-2026-40917: plug-ins: Clean up ICNS file loading bsc1262199. Tenable has extracted the preceding description block directly from...

openSUSE 16 Security Update : libnfs (openSUSE-SU-2026:21055-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21055-1 advisory. This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server bsc1268135. Tenable has...

openSUSE 16 Security Update : python-pdm (openSUSE-SU-2026:21161-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21161-1 advisory. Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files bsc1268384 - CVE-2026-47763: Do not write to paths...

openSUSE 16 Security Update : giflib (openSUSE-SU-2026:21076-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21076-1 advisory. This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE...

openSUSE 16: docker / docker-bash-completion / docker-buildx / etc (openSUSE-SU-2026:21060-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21060-1 advisory. This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

python311-jupyter-server-2.20.0-1.1 on GA media (moderate)

python311-jupyter-server-2.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11159-1 Rating: moderate Cross-References: CVE-2026-44727 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media (moderate)

perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11158-1 Rating: moderate Cross-References: CVE-2026-56017 CVE-2026-56018 CVSS scores: CVE-2026-56017 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56017 SUSE : 8.7...