libBasicUsageEnvironment2-2026.04.22-1.1 on GA media (moderate)

libBasicUsageEnvironment2-2026.04.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10881-1 Rating: moderate Cross-References: CVE-2026-41470 CVSS scores: CVE-2026-41470 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:10896-1 libzypp-17.38.10-1.1 on GA media

These are all security issues fixed in the libzypp-17.38.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10891-1 gsasl-2.2.3-1.1 on GA media

These are all security issues fixed in the gsasl-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10888-1 argocd-cli-3.4.3-1.1 on GA media

These are all security issues fixed in the argocd-cli-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10897-1 libmariadbd-devel-11.8.7-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10894-1 kpt-cli-1.0.0~beta.64-1.1 on GA media

These are all security issues fixed in the kpt-cli-1.0.0beta.64-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45156

Name of the Vulnerable Software and Affected Versions python311-dulwich versions prior to 1.2.5-1.1 Description Security issues were identified in the python311-dulwich package. Recommendations Update to version 1.2.5-1.1...

OPENSUSE-SU-2026:10890-1 ffmpeg-8-8.1.1-3.1 on GA media

These are all security issues fixed in the ffmpeg-8-8.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10893-1 java-26-openjdk-26.0.1.0-1.1 on GA media

These are all security issues fixed in the java-26-openjdk-26.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10899-1 mcphost-0.34.0-7.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10898-1 matrix-synapse-1.153.0-2.1 on GA media

These are all security issues fixed in the matrix-synapse-1.153.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-45144

Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.10 Description A relative path traversal issue exists when processing repository metadata. Remote attackers can exploit this by supplying malicious repositories to overwrite files on the system, which may result...

OPENSUSE-SU-2026:10895-1 libsolv-demo-0.7.38-1.1 on GA media

These are all security issues fixed in the libsolv-demo-0.7.38-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10900-1 python311-dulwich-1.2.5-1.1 on GA media

These are all security issues fixed in the python311-dulwich-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10902-1 golang-github-teddysun-v2ray-plugin-5.49.0-1.1 on GA media

These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.49.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10903-1 libunbound8-1.25.1-1.1 on GA media

These are all security issues fixed in the libunbound8-1.25.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10889-1 distribution-registry-3.1.1-3.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : alloy (openSUSE-SU-2026:20816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20816-1 advisory. This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key...

openSUSE 16 Security Update : bubblewrap (openSUSE-SU-2026:20811-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20811-1 advisory. This update for bubblewrap fixes the following issue - CVE-2026-41163: improper process attachment via ptrace can lead to arbitrary privileged operation...

openSUSE 16 Security Update : libarchive (openSUSE-SU-2026:20797-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20797-1 advisory. This update for libarchive fixes the following issues - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output...