OPENSUSE-SU-2026:11069-1 squid-7.6-1.1 on GA media

These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11068-1 python311-3.11.15-6.1 on GA media

These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11067-1 python311-joserfc-1.7.1-1.1 on GA media

These are all security issues fixed in the python311-joserfc-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

inspektor-gadget-0.53.2-1.1 on GA media (moderate)

inspektor-gadget-0.53.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11056-1 Rating: moderate Cross-References: CVE-2026-42504 CVSS scores: CVE-2026-42504 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-42504 SUSE : 6.9...

OPENSUSE-SU-2026:11070-1 warewulf4-4.7.0-2.1 on GA media

These are all security issues fixed in the warewulf4-4.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-52060

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x and earlier Node.js versions 24.x and earlier Node.js versions 26.0.0 through 26.3.0 Description An inconsistency in hostname matching can lead to a trust-policy bypass within multi-context mTLS mutual Transport Layer...

OPENSUSE-SU-2026:11065-1 freerdp-3.27.1-1.1 on GA media

These are all security issues fixed in the freerdp-3.27.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-52057

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.0.0 through 26.3.0 Description An issue in proxy tunnel error handling may lead to the exposure of proxy credentials within ERR PROXY TUNNEL error messages. This occurs when...

PT-2026-52064

Name of the Vulnerable Software and Affected Versions Node.js versions 26.0.0 through 26.3.0 Description A flaw in the Node.js Permission API allows a local server to be started via a Unix domain socket, bypassing the requirement for the --allow-net permission. Recommendations Update to version...

lemon-3.53.2-2.1 on GA media (moderate)

lemon-3.53.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11059-1 Rating: moderate Cross-References: CVE-2026-11822 CVE-2026-11824 CVSS scores: CVE-2026-11822 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-11824 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...

OPENSUSE-SU-2026:11062-1 ansible-core-2.18-2.18.18-1.1 on GA media

These are all security issues fixed in the ansible-core-2.18-2.18.18-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-52063

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Node.js Permission API allows file metadata to be modified even when a path is configured as read-only, such as when using the --allow-fs-read flag...

PT-2026-52058

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x, 24.x, and 26.x prior to 26.3.1-1.1 Description A flaw in the Node.js HTTP/2 client enables a server to send an unlimited number of ORIGIN frames, potentially causing an Out of Memory error on the client side...

containerized-data-importer-1.65-api-1.65.0-1.1 on GA media (moderate)

containerized-data-importer-1.65-api-1.65.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11054-1 Rating: moderate Cross-References: CVE-2024-3727 CVSS scores: CVE-2024-3727 SUSE : 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves on...

PT-2026-52061

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x and earlier Node.js versions 24.x and earlier Node.js versions 26.x and earlier Description A flaw in TLS hostname handling allows embedded-nul hostnames to cause silent authority rebinding. This occurs due to c-string...

PT-2026-51167

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1 Description When clients are launched with the non-default /cache:codec:rfx option, the software passes the desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data. However, in the gdi Bitmap...

OPENSUSE-SU-2026:11061-1 ImageMagick-7.1.2.25-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11066-1 nginx-1.31.2-1.1 on GA media

These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaFirefox-152.0-1.1 on GA media (moderate)

MozillaFirefox-152.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11052-1 Rating: moderate Cross-References: CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292 CVE-2026-12293 CVE-2026-12294 CVE-2026-12295 CVE-2026-12296 CVE-2026-12297 CVE-2026-12298 CVE-2026-12299 CVE-2026-12300...

tinyproxy-1.11.3-3.1 on GA media (moderate)

tinyproxy-1.11.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11060-1 Rating: moderate Cross-References: CVE-2026-54387 CVE-2026-54388 CVE-2026-55202 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issue...