OPENSUSE-SU-2026:11697-1 distribution-registry-3.1.1-6.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21768-1 Security update for msgpack-c

This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation bsc1275911...

trivy-0.74.0-3.1 on GA media (moderate)

trivy-0.74.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11691-1 Rating: moderate Cross-References: CVE-2026-56855 CVSS scores: CVE-2026-56855 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56855 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

python310-3.10.20-10.1 on GA media (moderate)

python310-3.10.20-10.1 on GA media Announcement ID: openSUSE-SU-2026:11690-1 Rating: moderate Cross-References: CVE-2026-13346 CVE-2026-1703 CVE-2026-3219 CVSS scores: CVE-2026-13346 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N CVE-2026-13346 SUSE : 5.6...

php-composer2-2.10.3-2.1 on GA media (moderate)

php-composer2-2.10.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11689-1 Rating: moderate Cross-References: CVE-2026-84361 CVSS scores: CVE-2026-84361 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

ollama-0.33.1-1.1 on GA media (moderate)

ollama-0.33.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11688-1 Rating: moderate Cross-References: CVE-2026-7482 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the ollama-0.33.1-1.1...

hauler-2.1.0-2.1 on GA media (moderate)

hauler-2.1.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11685-1 Rating: moderate Cross-References: CVE-2026-56855 CVSS scores: CVE-2026-56855 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56855 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

libcupsfilters-2.1.1-2.1 on GA media (moderate)

libcupsfilters-2.1.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11687-1 Rating: moderate Cross-References: CVE-2026-64611 CVE-2026-64612 CVSS scores: CVE-2026-64611 SUSE : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-64611 SUSE : 7.1...

helm3-3.21.3-8.1 on GA media (moderate)

helm3-3.21.3-8.1 on GA media Announcement ID: openSUSE-SU-2026:11686-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

OPENSUSE-SU-2026:21799-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.82 boo1278683: CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in CrashReporting CVE-2026-85043: Incomplete cleanup in Network CVE-2026-85048: Use after free in Compositing...

OESA-2026-3697 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: CVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEM...

OESA-2026-3594 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

cups-filters-1.28.17-9.1 on GA media (moderate)

cups-filters-1.28.17-9.1 on GA media Announcement ID: openSUSE-SU-2026:11681-1 Rating: moderate Cross-References: CVE-2026-64611 CVE-2026-64612 CVSS scores: CVE-2026-64611 SUSE : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-64611 SUSE : 7.1...

ffmpeg-8-8.1.2-3.1 on GA media (moderate)

ffmpeg-8-8.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11682-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVE-2026-70628 CVE-2026-70629 CVE-2026-70630...

MozillaThunderbird-140.15.0-1.1 on GA media (moderate)

MozillaThunderbird-140.15.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11678-1 Rating: moderate Cross-References: CVE-2026-16365 CVE-2026-75874 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84124 CVE-2026-84131 CVE-2026-84143 CVE-2026-84145 CVE-2026-84639...

grafana-12.4.10-1.1 on GA media (moderate)

grafana-12.4.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11684-1 Rating: moderate Cross-References: CVE-2026-14199 CVE-2026-17033 CVE-2026-17183 CVE-2026-19197 CVE-2026-19475 CVE-2026-2303 CVE-2026-41178 CVE-2026-56852 CVE-2026-73501 CVSS scores: CVE-2026-14199 SUSE : 7.1...

OPENSUSE-SU-2026:21762-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...

Security update for libheif

This update for libheif fixes the following issue: CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

PT-2026-86429

Name of the Vulnerable Software and Affected Versions gRPC-Go versions prior to 1.82.2 gRPC-Go versions prior to 1.83.2 Description Servers created with xds.NewGRPCServer are susceptible to a Denial of Service DoS because the HTTP/2 server transport may accept RPCs missing both the :authority...